aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2022-03-12netfilter: nf_tables: disable register trackingPablo Neira Ayuso1-2/+7
2022-03-08Revert "netfilter: conntrack: tag conntracks picked up in local out hook"Florian Westphal1-3/+0
2022-03-08Revert "netfilter: nat: force port remap to prevent shadowing well-known ports"Florian Westphal1-40/+3
2022-03-01net/sched: act_ct: Fix flow table lookup failure with no originating ifindexPaul Blakey1-1/+5
2022-03-01netfilter: nf_queue: handle socket prefetchFlorian Westphal1-0/+12
2022-03-01netfilter: nf_queue: fix possible use-after-freeFlorian Westphal2-7/+18
2022-03-01netfilter: nf_queue: don't assume sk is full socketFlorian Westphal1-1/+10
2022-02-28netfilter: fix use-after-free in __nf_register_net_hook()Eric Dumazet1-2/+3
2022-02-23netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variantEric Dumazet1-2/+2
2022-02-22netfilter: nf_tables: fix memory leak during stateful obj updateFlorian Westphal1-4/+9
2022-02-21netfilter: nft_limit: fix stateful object memory leakFlorian Westphal1-0/+18
2022-02-21netfilter: nf_tables: unregister flowtable hooks on netns exitPablo Neira Ayuso1-0/+3
2022-02-20netfilter: nf_tables_offload: incorrect flow offload action array sizePablo Neira Ayuso4-2/+25
2022-02-13netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependencyPablo Neira Ayuso1-0/+2
2022-02-10netfilter: nft_synproxy: unregister hooks on init error pathPablo Neira Ayuso1-1/+3
2022-02-09netfilter: xt_socket: fix a typo in socket_mt_destroy()Eric Dumazet1-1/+1
2022-02-04netfilter: ctnetlink: disable helper autoassignFlorian Westphal1-1/+2
2022-02-04netfilter: conntrack: re-init state for retransmitted syn-ackFlorian Westphal1-0/+12
2022-02-04netfilter: conntrack: move synack init code to helperFlorian Westphal1-18/+29
2022-02-04netfilter: nft_payload: don't allow th access for fragmentsFlorian Westphal2-5/+6
2022-02-04netfilter: conntrack: don't refresh sctp entries in closed stateFlorian Westphal1-0/+9
2022-01-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfJakub Kicinski3-2/+16
2022-01-27Merge tag 'net-5.17-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netLinus Torvalds4-9/+19
2022-01-27netfilter: nf_tables: remove assignment with no effect in chain blob builderPablo Neira Ayuso1-1/+0
2022-01-27netfilter: nft_byteorder: track register operationsPablo Neira Ayuso1-0/+12
2022-01-27netfilter: nft_ct: fix use after free when attaching zone templateFlorian Westphal1-1/+4
2022-01-22proc: remove PDE_DATA() completelyMuchun Song3-16/+16
2022-01-16netfilter: conntrack: don't increment invalid counter on NF_REPEATFlorian Westphal1-3/+5
2022-01-13netfilter: nft_connlimit: memleak if nf_ct_netns_get() failsPablo Neira Ayuso1-1/+10
2022-01-12netfilter: nf_tables: set last expression in register tracking areaPablo Neira Ayuso1-1/+1
2022-01-11netfilter: nf_tables: remove unused variablePablo Neira Ayuso1-2/+0
2022-01-11netfilter: nf_conntrack_netbios_ns: fix helper module aliasFlorian Westphal1-2/+3
2022-01-10netfilter: nf_tables: typo NULL check in _clone() functionPablo Neira Ayuso4-4/+4
2022-01-10netfilter: nf_tables: don't use 'data_size' uninitializedLinus Torvalds1-0/+1
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-0/+11
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski29-285/+786
2022-01-09netfilter: nft_meta: cancel register tracking after meta updatePablo Neira Ayuso1-0/+20
2022-01-09netfilter: nft_payload: cancel register tracking after payload updatePablo Neira Ayuso1-0/+21
2022-01-09netfilter: nft_bitwise: track register operationsPablo Neira Ayuso3-2/+97
2022-01-09netfilter: nft_meta: track register operationsPablo Neira Ayuso1-0/+28
2022-01-09netfilter: nft_payload: track register operationsPablo Neira Ayuso1-0/+30
2022-01-09netfilter: nf_tables: add register tracking infrastructurePablo Neira Ayuso1-0/+11
2022-01-09netfilter: nf_tables: add rule blob layoutPablo Neira Ayuso3-63/+129
2022-01-09netfilter: nft_limit: move stateful fields out of expression dataPablo Neira Ayuso1-12/+82
2022-01-09netfilter: nft_limit: rename stateful structurePablo Neira Ayuso1-52/+52
2022-01-09netfilter: nft_numgen: move stateful fields out of expression dataPablo Neira Ayuso1-6/+28
2022-01-09netfilter: nft_quota: move stateful fields out of expression dataPablo Neira Ayuso1-5/+47
2022-01-09netfilter: nft_last: move stateful fields out of expression dataPablo Neira Ayuso1-18/+51
2022-01-09netfilter: nft_connlimit: move stateful fields out of expression dataPablo Neira Ayuso1-8/+18
2022-01-09net: prefer nf_ct_put instead of nf_conntrack_putFlorian Westphal1-2/+2