aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2024-06-27netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso2-5/+6
2024-06-26netfilter: cttimeout: remove 'l3num' attr checkLin Ma1-2/+1
2024-06-26netfilter: nf_conncount: fix wrong variable typeYunjian Wang1-5/+3
2024-06-26ipvs: Avoid unnecessary calls to skb_is_gso_sctpIsmael Luceno1-2/+2
2024-06-25netfilter: nf_tables: do not store nft_ctx in transaction objectsFlorian Westphal2-62/+86
2024-06-25netfilter: nf_tables: pass nft_table to destroy functionFlorian Westphal1-9/+9
2024-06-25netfilter: nf_tables: reduce trans->ctx.chain referencesFlorian Westphal1-9/+7
2024-06-25netfilter: nf_tables: store chain pointer in rule transactionFlorian Westphal2-18/+19
2024-06-25netfilter: nf_tables: avoid usage of embedded nft_ctxFlorian Westphal2-13/+13
2024-06-25netfilter: nf_tables: pass more specific nft_trans_chain where possibleFlorian Westphal1-25/+26
2024-06-25netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal2-10/+9
2024-06-25netfilter: nf_tables: reduce trans->ctx.table referencesFlorian Westphal1-38/+41
2024-06-25netfilter: nf_tables: move bind list_head into relevant subtypesFlorian Westphal1-14/+57
2024-06-25netfilter: nf_tables: make struct nft_trans first member of derived subtypesFlorian Westphal1-5/+13
2024-06-24netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when CONFIG_SYSCTL=nJianguo Wu1-0/+3
2024-06-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-22/+90
2024-06-19netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter coreJianguo Wu4-17/+84
2024-06-19netfilter: ipset: Fix suspicious rcu_dereference_protected()Jozsef Kadlecsik1-5/+6
2024-06-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-51/+67
2024-06-12net: add and use __skb_get_hash_symmetric_netFlorian Westphal1-1/+2
2024-06-12net: add and use skb_get_hash_netFlorian Westphal1-1/+1
2024-06-11netfilter: ipset: Fix race between namespace cleanup and gc in the list:set typeJozsef Kadlecsik2-51/+60
2024-06-11netfilter: nft_inner: validate mandatory meta and payloadDavide Ornaghi2-0/+7
2024-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-28/+80
2024-05-28ipvs: constify ctl_table arguments of utility functionsThomas Weißschuh1-3/+4
2024-05-29netfilter: nft_fib: allow from forward/input without iif selectorEric Garver1-5/+3
2024-05-29netfilter: nft_payload: skbuff vlan metadata mangle supportPablo Neira Ayuso1-7/+65
2024-05-22net: netfilter: Make ct zone opts configurable for bpf ct helpersBrad Cowie1-13/+55
2024-05-20netfilter: nft_payload: restore vlan q-in-q match supportPablo Neira Ayuso1-16/+7
2024-05-20netfilter: ipset: Add list flush to cancel_gcAlexander Maltsev1-0/+3
2024-05-20netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()Eric Dumazet1-0/+2
2024-05-13Merge tag 'nf-next-24-05-12' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski13-169/+157
2024-05-10netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal7-19/+21
2024-05-10netfilter: nft_set_pipapo: remove dirty flagFlorian Westphal2-27/+0
2024-05-10netfilter: nft_set_pipapo: move cloning of match info to insert/removal pathFlorian Westphal1-21/+49
2024-05-10netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand cloneFlorian Westphal1-7/+10
2024-05-08ipvs: allow some sysctls in non-init user namespacesAlexander Mikhalitsyn1-4/+15
2024-05-08ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthreshAlexander Mikhalitsyn1-7/+7
2024-05-06netfilter: nft_set_pipapo: merge deactivate helper into callerFlorian Westphal1-30/+9
2024-05-06netfilter: nft_set_pipapo: prepare walk function for on-demand cloneFlorian Westphal1-21/+39
2024-05-06netfilter: nft_set_pipapo: prepare destroy function for on-demand cloneFlorian Westphal1-21/+6
2024-05-06netfilter: nft_set_pipapo: make pipapo_clone helper return NULLFlorian Westphal1-7/+7
2024-05-06netfilter: nft_set_pipapo: move prove_locking helper aroundFlorian Westphal1-11/+11
2024-05-06netfilter: conntrack: remove flowtable early-drop testFlorian Westphal1-2/+0
2024-05-06netfilter: use NF_DROP instead of -NF_DROPJason Xing1-1/+1
2024-05-06netfilter: conntrack: dccp: try not to drop skb in conntrackJason Xing1-2/+2
2024-05-06netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router DiscoveryLinus Lüssing1-1/+3
2024-05-06netfilter: nf_tables: remove NETDEV_CHANGENAME from netdev chain event handlerPablo Neira Ayuso1-5/+1
2024-05-06netfilter: nf_tables: skip transaction if update object is not implementedPablo Neira Ayuso1-2/+6
2024-05-03netfilter: Remove the now superfluous sentinel elements from ctl_table arrayJoel Granados5-19/+5
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.