aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2021-06-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller12-40/+132
2021-06-21netfilter: nfnetlink_hook: fix check for snprintf() overflowDan Carpenter1-1/+3
2021-06-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-42/+48
2021-06-18netfilter: conntrack: pass hook state to log functionsFlorian Westphal7-36/+35
2021-06-17netfilter: nf_tables: add last expressionPablo Neira Ayuso3-1/+89
2021-06-16netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter1-1/+1
2021-06-16netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter1-1/+4
2021-06-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-42/+43
2021-06-10netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy1-0/+5
2021-06-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller20-203/+615
2021-06-09netfilter: nf_tables: move base hook annotation to init helperFlorian Westphal1-8/+7
2021-06-09netfilter: nfnetlink_hook: add depends-on nftablesFlorian Westphal1-0/+1
2021-06-09netfilter: nfnetlink_hook: fix array index out-of-bounds errorColin Ian King1-1/+1
2021-06-09netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso1-42/+43
2021-06-09netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter1-1/+3
2021-06-07Merge ra.kernel.org:/pub/scm/linux/kernel/git/netdev/netDavid S. Miller5-32/+66
2021-06-07netfilter: add new hook nfnl subsystemFlorian Westphal4-0/+386
2021-06-07netfilter: annotate nf_tables base hook opsFlorian Westphal1-1/+3
2021-06-07netfilter: flowtable: Set offload timeouts according to proto valuesOz Shlomo2-12/+39
2021-06-07netfilter: conntrack: Introduce udp offload timeout configurationOz Shlomo2-0/+27
2021-06-07netfilter: conntrack: Introduce tcp offload timeout configurationOz Shlomo2-0/+29
2021-06-07netfilter: nftables: add nf_ct_pernet() helper functionPablo Neira Ayuso6-38/+24
2021-06-07netfilter: nf_tables: remove nft_ctx_init_from_setattr()Pablo Neira Ayuso1-39/+25
2021-06-07netfilter: nf_tables: remove nft_ctx_init_from_elemattr()Pablo Neira Ayuso1-38/+34
2021-06-07netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use itPablo Neira Ayuso6-70/+41
2021-06-02netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatchesPablo Neira Ayuso1-2/+6
2021-06-02netfilter: nft_ct: skip expectations for confirmed conntrackPablo Neira Ayuso1-1/+1
2021-06-01netfilter: fix clang-12 fmt string warningsFlorian Westphal2-2/+2
2021-06-01netfilter: nft_set_pipapo_avx2: fix up description warningsFlorian Westphal1-2/+1
2021-05-29netfilter: nf_tables: remove xt_action_param from nft_pktinfoFlorian Westphal1-10/+18
2021-05-29netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec()Florian Westphal3-17/+17
2021-05-29netfilter: nf_tables: add and use nft_thoff helperFlorian Westphal7-18/+18
2021-05-29netfilter: nf_tables: add and use nft_sk helperFlorian Westphal1-2/+2
2021-05-29netfilter: use nfnetlink_unicast()Pablo Neira Ayuso5-124/+44
2021-05-29netfilter: xt_CT: Remove redundant assignment to retYang Li1-1/+0
2021-05-29netfilter: x_tables: improve limit_mt scalabilityJason Baron1-20/+26
2021-05-29netfilter: Remove leading spaces in KconfigJuerg Haefliger2-2/+2
2021-05-29netfilter: nf_tables: prefer direct calls for set lookupsFlorian Westphal6-15/+47
2021-05-28netfilter: add and use nft_set_do_lookup helperFlorian Westphal2-4/+4
2021-05-28netfilter: nft_set_pipapo_avx2: Skip LDMXCSR, we don't need a valid MXCSR stateStefano Brivio1-2/+7
2021-05-28netfilter: nft_exthdr: Support SCTP chunksPhil Sutter1-0/+51
2021-05-27ipvs: ignore IP_VS_SVC_F_HASHED flag when adding serviceJulian Anastasov1-1/+1
2021-05-24netfilter: nf_tables: fix table flag updatesPablo Neira Ayuso1-19/+40
2021-05-21netfilter: nf_tables: extended netlink error reporting for chain typePablo Neira Ayuso1-7/+14
2021-05-21netfilter: nf_tables: missing error reporting for not selected expressionsPablo Neira Ayuso1-1/+3
2021-05-20netfilter: conntrack: unregister ipv4 sockopts on error unwindFlorian Westphal1-1/+1
2021-05-14netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 versionStefano Brivio3-2/+7
2021-05-14netfilter: flowtable: Remove redundant hw refresh bitRoi Dayan2-5/+5
2021-05-07netfilter: nftables: avoid potential overflows on 32bit archesEric Dumazet2-7/+10
2021-05-07netfilter: nftables: avoid overflows in nft_hash_buckets()Eric Dumazet1-1/+9