aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2019-08-29netfilter: nf_flow_table: clear skb tstamp before xmitFlorian Westphal1-1/+2
2019-08-27netfilter: conntrack: make sysctls per-namespace againFlorian Westphal1-0/+5
2019-08-27netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch1-1/+1
2019-08-27netfilter: xt_physdev: Fix spurious error message in physdev_mt_checkTodd Seidelmann1-4/+2
2019-08-19netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro1-11/+25
2019-08-19netfilter: nft_flow_offload: missing netlink attribute policyPablo Neira Ayuso1-0/+6
2019-08-18netfilter: nf_tables: map basechain priority to hardware priorityPablo Neira Ayuso2-3/+18
2019-08-14netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso1-3/+6
2019-08-13netfilter: conntrack: Use consistent ct id hash calculationDirk Morris1-8/+8
2019-08-09netfilter: nf_flow_table: teardown flow timeout racePablo Neira Ayuso1-9/+25
2019-08-09netfilter: nf_flow_table: conntrack picks up expired flowsPablo Neira Ayuso1-7/+10
2019-08-09netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso1-5/+10
2019-08-05netfilter: nf_flow_table: fix offload for flows that are subject to xfrmFlorian Westphal1-0/+43
2019-07-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik1-1/+1
2019-07-29netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac setsStefano Brivio2-2/+2
2019-07-29netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets tooStefano Brivio1-4/+0
2019-07-25netfilter: nf_tables: Make nft_meta expression more robustPhil Sutter1-12/+4
2019-07-19net: flow_offload: add flow_block structure and use itPablo Neira Ayuso2-3/+4
2019-07-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller34-64/+84
2019-07-19netfilter: bridge: make NF_TABLES_BRIDGE tristateArnd Bergmann2-2/+2
2019-07-18proc/sysctl: add shared variables for range checkMatteo Croce1-2/+1
2019-07-18netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a modulePablo Neira Ayuso1-1/+1
2019-07-18netfilter: synproxy: fix rst sequence number mismatchFernando Fernandez Mancera1-2/+2
2019-07-18netfilter: nf_tables: Support auto-loading for inet natPhil Sutter1-0/+3
2019-07-16netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana1-1/+1
2019-07-16netfilter: nf_tables: don't fail when updating base chain policyFlorian Westphal1-0/+2
2019-07-16netfilter: conntrack: always store window size un-scaledFlorian Westphal1-3/+5
2019-07-16netfilter: synproxy: fix erroneous tcp mss optionFernando Fernandez Mancera2-2/+4
2019-07-16netfilter: nf_tables: fix module autoload for redirChristian Hesse1-1/+1
2019-07-16netfilter: Update obsolete comments referring to ip_conntrackYonatan Goldschmidt6-14/+7
2019-07-16netfilter: nf_conntrack_sip: fix expectation clashxiao ruizhu18-38/+56
2019-07-15netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal1-1/+1
2019-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds69-512/+2909
2019-07-09netfilter: nf_tables: add hardware offload supportPablo Neira Ayuso7-7/+599
2019-07-09Merge tag 'docs-5.3' of git://git.lwn.net/linuxLinus Torvalds1-8/+8
2019-07-09Merge tag 'leds-for-5.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-ledsLinus Torvalds1-1/+1
2019-07-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller8-81/+100
2019-07-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller13-76/+472
2019-07-06netfilter: nf_tables: force module load in case select_ops() returns -EAGAINPablo Neira Ayuso2-0/+10
2019-07-05netfilter: nf_tables: __nft_expr_type_get() selects specific family typePablo Neira Ayuso1-5/+8
2019-07-05netfilter: nf_tables: add nft_expr_type_request_module()Pablo Neira Ayuso1-3/+14
2019-07-05netfilter: nft_meta: move bridge meta keys into nft_meta_bridgewenxu2-53/+29
2019-07-05ipvs: strip gre tunnel headers from icmp errorsJulian Anastasov1-4/+42
2019-07-05netfilter: nf_tables: Add synproxy supportFernando Fernandez Mancera3-0/+299
2019-07-04ipvs: allow tunneling with gre encapsulationVadim Fedorenko2-3/+64
2019-07-04netfilter: nf_queue: remove unused hook entries pointerFlorian Westphal2-6/+4
2019-07-04netfilter: nf_log: Replace a seq_printf() call by seq_puts() in seq_show()Markus Elfring1-1/+1
2019-07-04netfilter: rename nf_SYNPROXY.h to nf_synproxy.hPablo Neira Ayuso1-1/+1
2019-06-29net: make skb_dst_force return true when dst is refcountedFlorian Westphal1-1/+5
2019-06-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller7-80/+95