aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-05-23netfilter: nf_tables: Introduce nft_hook_find_ops{,_rcu}()Phil Sutter4-5/+26
2025-05-23netfilter: nf_tables: Introduce functions freeing nft_hook objectsPhil Sutter1-14/+24
2025-05-23netfilter: nf_tables: add packets conntrack state to debug trace infoFlorian Westphal1-1/+53
2025-05-23netfilter: conntrack: make nf_conntrack_id callable without a module dependencyFlorian Westphal1-0/+6
2025-05-23netfilter: nf_dup_netdev: Move the recursion counter struct netdev_xmitSebastian Andrzej Siewior1-4/+18
2025-05-23netfilter: nft_inner: Use nested-BH locking for nft_pcpu_tun_ctxSebastian Andrzej Siewior1-3/+15
2025-05-23netfilter: nf_dup{4, 6}: Move duplication check to task_structSebastian Andrzej Siewior1-3/+0
2025-05-23netfilter: nft_tunnel: fix geneve_opt dumpFernando Fernandez Mancera1-4/+4
2025-05-22netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only buildsFlorian Westphal2-3/+3
2025-05-21sctp: use skb_crc32c() instead of __skb_checksum()Eric Biggers2-3/+3
2025-05-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-20/+9
2025-05-07netfilter: ipset: fix region locking in hash typesJozsef Kadlecsik1-1/+1
2025-05-07ipvs: fix uninit-value for saddr in do_output_route4Julian Anastasov1-19/+8
2025-05-05netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAXPablo Neira Ayuso1-0/+6
2025-05-05netfilter: nft_set_pipapo: prevent overflow in lookup table allocationPablo Neira Ayuso1-14/+44
2025-05-05netfilter: nf_conntrack: speed up reads from nf_conntrack proc fileFlorian Westphal1-35/+53
2025-05-05netfilter: nft_quota: match correctly when the quota just depletedZhongqiu Duan1-7/+13
2025-04-29netfilter: nf_tables: export set count and backend name to userspaceFlorian Westphal1-0/+26
2025-04-29netfilter: conntrack: Remove redundant NFCT_ALIGN callXuanqiang Luo1-3/+1
2025-04-24net: cgroup: Guard users of sock_cgroup_classid()Michal Koutný1-0/+9
2025-04-24netfilter: xt_cgroup: Make it independent from net_clsMichal Koutný2-1/+18
2025-04-24netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies()Easwar Hariharan1-6/+6
2025-04-17netfilter: conntrack: fix erronous removal of offload bitFlorian Westphal1-4/+6
2025-04-10Merge tag 'net-6.15-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netLinus Torvalds1-1/+2
2025-04-10nft_set_pipapo: fix incorrect avx2 match of 5th field octetFlorian Westphal1-1/+2
2025-04-08Merge tag 'crc-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxLinus Torvalds2-3/+3
2025-04-05treewide: Switch/rename to timer_delete[_sync]()Thomas Gleixner6-13/+13
2025-04-04lib/crc: remove CONFIG_LIBCRC32CEric Biggers2-3/+3
2025-04-03Merge tag 'nf-25-04-03' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski3-5/+6
2025-04-03net: fix geneve_opt length integer overflowLin Ma1-1/+1
2025-04-03netfilter: nft_tunnel: fix geneve_opt type confusion additionLin Ma1-2/+2
2025-04-02netfilter: nf_tables: don't unregister hook when table is dormantFlorian Westphal1-2/+2
2025-04-02netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso1-1/+2
2025-03-25Merge tag 'nf-next-25-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski5-19/+20
2025-03-23netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINEWangYuli1-7/+4
2025-03-23netfilter: xtables: Use strscpy() instead of strscpy_pad()Thorsten Blum1-1/+1
2025-03-23netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation errorChenyuan Yang1-1/+1
2025-03-17tcp: extend TCP flags to allow AE bit/ACE fieldIlpo Järvinen1-3/+5
2025-03-13netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-12netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet1-3/+9
2025-03-12netfilter: xt_hashlimit: replace vmalloc calls with kvmallocDenis Kirjanov1-7/+5
2025-03-12ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-12netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()Kohei Enju1-0/+2
2025-03-06net: hold netdev instance lock during nft ndo_setup_tcStanislav Fomichev2-2/+2
2025-03-06netfilter: nf_tables: make destruction work queue pernetFlorian Westphal2-14/+18
2025-03-05netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap aroundNicklas Bo Jensen1-2/+2
2025-03-03netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-02-12Revert "netfilter: flowtable: teardown flow if cached mtu is stale"Pablo Neira Ayuso1-6/+2
2025-01-30Merge tag 'net-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netLinus Torvalds1-4/+4
2025-01-30Merge tag 'nf-25-01-30' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski1-4/+4
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.