aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2021-06-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-42/+43
2021-06-10netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy1-0/+5
2021-06-09netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso1-42/+43
2021-06-02netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatchesPablo Neira Ayuso1-2/+6
2021-06-02netfilter: nft_ct: skip expectations for confirmed conntrackPablo Neira Ayuso1-1/+1
2021-05-27ipvs: ignore IP_VS_SVC_F_HASHED flag when adding serviceJulian Anastasov1-1/+1
2021-05-24netfilter: nf_tables: fix table flag updatesPablo Neira Ayuso1-19/+40
2021-05-21netfilter: nf_tables: extended netlink error reporting for chain typePablo Neira Ayuso1-7/+14
2021-05-21netfilter: nf_tables: missing error reporting for not selected expressionsPablo Neira Ayuso1-1/+3
2021-05-20netfilter: conntrack: unregister ipv4 sockopts on error unwindFlorian Westphal1-1/+1
2021-05-14netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 versionStefano Brivio3-2/+7
2021-05-14netfilter: flowtable: Remove redundant hw refresh bitRoi Dayan2-5/+5
2021-05-07netfilter: nftables: avoid potential overflows on 32bit archesEric Dumazet2-7/+10
2021-05-07netfilter: nftables: avoid overflows in nft_hash_buckets()Eric Dumazet1-1/+9
2021-05-05netfilter: nftables: Fix a memleak from userdata error path in new objectsPablo Neira Ayuso1-2/+2
2021-05-05netfilter: remove BUG_ON() after skb_header_pointer()Pablo Neira Ayuso6-7/+21
2021-05-05netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL checkPablo Neira Ayuso1-0/+2
2021-05-05netfilter: nfnetlink: add a missing rcu_read_unlock()Eric Dumazet1-0/+1
2021-05-03netfilter: xt_SECMARK: add new revision to fix structure layoutPablo Neira Ayuso1-19/+69
2021-04-27netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=nArnd Bergmann1-2/+2
2021-04-27netfilter: nft_socket: fix an unused variable warningArnd Bergmann1-2/+5
2021-04-27netfilter: nftables: add catch-all set element supportPablo Neira Ayuso6-63/+458
2021-04-27netfilter: nftables: add helper function to validate set element dataPablo Neira Ayuso1-4/+11
2021-04-27netfilter: nftables: add helper function to flush set elementsPablo Neira Ayuso1-13/+18
2021-04-27netfilter: nftables: add loop check helper functionPablo Neira Ayuso1-9/+21
2021-04-27netfilter: nftables: rename set element data activation/deactivation functionsPablo Neira Ayuso1-11/+11
2021-04-26netfilter: allow to turn off xtables compat layerFlorian Westphal3-11/+21
2021-04-26netfilter: nfnetlink: consolidate callback typesPablo Neira Ayuso11-118/+261
2021-04-26netfilter: nfnetlink: pass struct nfnl_info to batch callbacksPablo Neira Ayuso2-172/+180
2021-04-26netfilter: nfnetlink: pass struct nfnl_info to rcu callbacksPablo Neira Ayuso4-116/+105
2021-04-26netfilter: nfnetlink: add struct nfnl_info and pass it to callbacksPablo Neira Ayuso9-336/+277
2021-04-26netfilter: nftables: add nft_pernet() helper functionPablo Neira Ayuso4-71/+61
2021-04-26netfilter: nf_log_syslog: Unset bridge logger in pernet exitPhil Sutter1-0/+1
2021-04-26netfilter: ip_tables: pass table pointer via nf_hook_opsFlorian Westphal1-0/+1
2021-04-26netfilter: x_tables: add xt_find_tableFlorian Westphal1-0/+17
2021-04-26netfilter: disable defrag once its no longer neededFlorian Westphal4-2/+57
2021-04-26netfilter: nft_socket: add support for cgroupsv2Pablo Neira Ayuso1-1/+47
2021-04-26netfilter: nat: move nf_xfrm_me_harder to where it is usedFlorian Westphal2-37/+38
2021-04-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller13-88/+329
2021-04-18netfilter: nftables: counter hardware offload supportPablo Neira Ayuso3-7/+69
2021-04-18netfilter: nftables_offload: special ethertype handling for VLANPablo Neira Ayuso1-0/+44
2021-04-18netfilter: nftables_offload: VLAN id needs host byteorder in flow dissectorPablo Neira Ayuso2-6/+45
2021-04-18netfilter: nft_payload: fix C-VLAN offload supportPablo Neira Ayuso1-2/+3
2021-04-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-25/+42
2021-04-13netfilter: flowtable: Add FLOW_OFFLOAD_XMIT_UNSPEC xmit typeRoi Dayan1-0/+3
2021-04-13netfilter: conntrack: convert sysctls to u8Florian Westphal2-41/+35
2021-04-13netfilter: conntrack: move ct counter to net_generic dataFlorian Westphal3-17/+45
2021-04-13netfilter: conntrack: move expect counter to net_generic dataFlorian Westphal2-7/+21
2021-04-13netfilter: conntrack: move autoassign_helper sysctl to net_generic dataFlorian Westphal2-6/+7
2021-04-13netfilter: conntrack: move autoassign warning member to net_generic dataFlorian Westphal1-3/+6