aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2021-06-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-52/+64
2021-06-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller12-40/+132
2021-06-22netfilter: nf_tables: do not allow to delete table with owner by handlePablo Neira Ayuso1-3/+9
2021-06-22netfilter: nf_tables: skip netlink portID validation if zeroPablo Neira Ayuso1-1/+1
2021-06-21netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer logicPablo Neira Ayuso1-10/+7
2021-06-21netfilter: nf_tables: memleak in hw offload abort pathPablo Neira Ayuso2-37/+31
2021-06-21netfilter: nfnetlink_hook: fix check for snprintf() overflowDan Carpenter1-1/+3
2021-06-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-42/+48
2021-06-18netfilter: conntrack: pass hook state to log functionsFlorian Westphal7-36/+35
2021-06-17netfilter: nf_tables: add last expressionPablo Neira Ayuso3-1/+89
2021-06-16netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter1-1/+1
2021-06-16netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter1-1/+4
2021-06-16netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso1-1/+8
2021-06-16netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso1-0/+5
2021-06-16netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso1-0/+3
2021-06-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-42/+43
2021-06-10netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy1-0/+5
2021-06-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller20-203/+615
2021-06-09netfilter: nf_tables: move base hook annotation to init helperFlorian Westphal1-8/+7
2021-06-09netfilter: nfnetlink_hook: add depends-on nftablesFlorian Westphal1-0/+1
2021-06-09netfilter: nfnetlink_hook: fix array index out-of-bounds errorColin Ian King1-1/+1
2021-06-09netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso1-42/+43
2021-06-09netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter1-1/+3
2021-06-07Merge ra.kernel.org:/pub/scm/linux/kernel/git/netdev/netDavid S. Miller5-32/+66
2021-06-07netfilter: add new hook nfnl subsystemFlorian Westphal4-0/+386
2021-06-07netfilter: annotate nf_tables base hook opsFlorian Westphal1-1/+3
2021-06-07netfilter: flowtable: Set offload timeouts according to proto valuesOz Shlomo2-12/+39
2021-06-07netfilter: conntrack: Introduce udp offload timeout configurationOz Shlomo2-0/+27
2021-06-07netfilter: conntrack: Introduce tcp offload timeout configurationOz Shlomo2-0/+29
2021-06-07netfilter: nftables: add nf_ct_pernet() helper functionPablo Neira Ayuso6-38/+24
2021-06-07netfilter: nf_tables: remove nft_ctx_init_from_setattr()Pablo Neira Ayuso1-39/+25
2021-06-07netfilter: nf_tables: remove nft_ctx_init_from_elemattr()Pablo Neira Ayuso1-38/+34
2021-06-07netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use itPablo Neira Ayuso6-70/+41
2021-06-02netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatchesPablo Neira Ayuso1-2/+6
2021-06-02netfilter: nft_ct: skip expectations for confirmed conntrackPablo Neira Ayuso1-1/+1
2021-06-01netfilter: fix clang-12 fmt string warningsFlorian Westphal2-2/+2
2021-06-01netfilter: nft_set_pipapo_avx2: fix up description warningsFlorian Westphal1-2/+1
2021-05-29netfilter: nf_tables: remove xt_action_param from nft_pktinfoFlorian Westphal1-10/+18
2021-05-29netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec()Florian Westphal3-17/+17
2021-05-29netfilter: nf_tables: add and use nft_thoff helperFlorian Westphal7-18/+18
2021-05-29netfilter: nf_tables: add and use nft_sk helperFlorian Westphal1-2/+2
2021-05-29netfilter: use nfnetlink_unicast()Pablo Neira Ayuso5-124/+44
2021-05-29netfilter: xt_CT: Remove redundant assignment to retYang Li1-1/+0
2021-05-29netfilter: x_tables: improve limit_mt scalabilityJason Baron1-20/+26
2021-05-29netfilter: Remove leading spaces in KconfigJuerg Haefliger2-2/+2
2021-05-29netfilter: nf_tables: prefer direct calls for set lookupsFlorian Westphal6-15/+47
2021-05-28netfilter: add and use nft_set_do_lookup helperFlorian Westphal2-4/+4
2021-05-28netfilter: nft_set_pipapo_avx2: Skip LDMXCSR, we don't need a valid MXCSR stateStefano Brivio1-2/+7
2021-05-28netfilter: nft_exthdr: Support SCTP chunksPhil Sutter1-0/+51
2021-05-27ipvs: ignore IP_VS_SVC_F_HASHED flag when adding serviceJulian Anastasov1-1/+1