aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2026-07-08netfilter: flowtable: support IPIP tunnel with direct xmitPablo Neira Ayuso2-6/+9
2026-07-08netfilter: flowtable: IPIP tunnel hardware offload is not yet supportPablo Neira Ayuso2-6/+23
2026-07-08netfilter: flowtable: use dst in this direction when pushing IPIP headerPablo Neira Ayuso1-7/+11
2026-07-08netfilter: ipset: allocate the proper memory for the generic hash structureJozsef Kadlecsik1-2/+11
2026-07-08netfilter: ipset: cleanup the add/del backlog when resize failedJozsef Kadlecsik1-8/+20
2026-07-08netfilter: ipset: exclude gc when resize is in progressJozsef Kadlecsik1-11/+20
2026-07-08netfilter: ipset: mark the rcu locked areas properlyJozsef Kadlecsik1-8/+5
2026-07-08netfilter: nft_lookup: fix catchall element handling with inverted lookupsTamaki Yanagawa1-5/+5
2026-07-03Merge tag 'nf-next-26-07-02' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextPaolo Abeni26-236/+225
2026-07-03netfilter: xt_connmark: reject invalid shift parametersWyatt Feng1-2/+12
2026-07-03ipvs: reset full ip_vs_seq structs in ip_vs_conn_newYizhou Zhao1-2/+2
2026-07-03ipvs: fix PMTU for GUE/GRE tunnel ICMP errorsYizhou Zhao1-3/+3
2026-07-03netfilter: nft_set_rbtree: get command skips end element with open intervalPablo Neira Ayuso2-2/+9
2026-07-03netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updatesPablo Neira Ayuso1-0/+2
2026-07-03netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()Feng Wu1-1/+1
2026-07-03netfilter: xt_u32: reject invalid shift countsWyatt Feng1-1/+11
2026-07-03netfilter: nf_nat_sip: reload possible stale data pointerFlorian Westphal1-0/+11
2026-07-02Merge tag 'net-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netLinus Torvalds11-20/+531
2026-07-02netfilter: nft_ct: support expectation creation for natted flowsFlorian Westphal1-0/+35
2026-07-02netfilter: conntrack: remove obsolete module parametersFlorian Westphal11-141/+58
2026-07-02netfilter: conntrack: get rid of tuple in helper definitionsFlorian Westphal4-28/+23
2026-07-02netfilter: nf_conntrack_helper: do not hash by tupleFlorian Westphal1-36/+31
2026-07-02netfilter: xt_dscp: add checkentry for tos matchFeng Wu1-0/+12
2026-07-02netfilter: xt_tcpmss: add checkentry for parameter validationFeng Wu1-0/+13
2026-07-02netfilter: remove redundant null check before kvfree()Subasri S1-2/+1
2026-07-02netfilter: avoid strcpy usageDavid Laight2-2/+2
2026-07-02netfilter: replace u_int8_t and u_int16t with u8 and u16Carlos Grillet4-7/+7
2026-07-02netfilter: x_tables: replace strlcat() with snprintf()Ian Bridges1-19/+11
2026-07-02netfilter: nfnetlink_hook: Dump nat type chainsPhil Sutter3-10/+41
2026-06-30netfilter: nftables: restrict checkum update offsetFlorian Westphal1-0/+100
2026-06-30netfilter: nftables: restrict linklayer and network header writesFlorian Westphal1-0/+170
2026-06-30netfilter: nfnetlink_queue: restrict writes to network headerFlorian Westphal1-0/+170
2026-06-30netfilter: nft_fib: reject fib expression on the netdev egress hookTheodor Arsenij Larionov-Trichkine2-1/+37
2026-06-30netfilter: nfnetlink_cthelper: cap to maximum number of expectation per masterPablo Neira Ayuso1-0/+2
2026-06-30netfilter: nf_conntrack_sip: validate skb_dst() before accessing itPablo Neira Ayuso1-2/+5
2026-06-30netfilter: ipset: fix race between dump and ip_set_list resizeXiang Mei1-1/+7
2026-06-30netfilter: nft_set_pipapo: don't leak bad clone into future transactionFlorian Westphal2-5/+37
2026-06-30netfilter: nf_conntrack_expect: zero at allocation timeFlorian Westphal2-11/+3
2026-06-25Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpfLinus Torvalds1-22/+13
2026-06-23netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registrationPablo Neira Ayuso2-4/+8
2026-06-23netfilter: nft_ct: expectation timeouts are passed in millisecondsFlorian Westphal1-3/+18
2026-06-23netfilter: nf_conntrack_expect: run expectation eviction with no helperPablo Neira Ayuso1-0/+7
2026-06-23netfilter: nf_conntrack_expect: store master_tuple in expectationPablo Neira Ayuso3-6/+7
2026-06-23netfilter: conntrack: add deprecation warnings for irc and pptp trackersFlorian Westphal3-5/+10
2026-06-23netfilter: ctnetlink: do not allow to reset helper on existing conntrackPablo Neira Ayuso1-13/+0
2026-06-23netfilter: nft_compat: ebtables emulation must reject non-bridge targetsFlorian Westphal1-3/+21
2026-06-23netfilter: nft_synproxy: stop bypassing the priv->info snapshotRunyu Xiao1-5/+4
2026-06-23netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()Lorenzo Bianconi1-3/+5
2026-06-23netfilter: nf_conncount: prevent connlimit drops for early confirmed ctFernando Fernandez Mancera1-6/+5
2026-06-23netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()Mathias Krause1-0/+10
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.