summaryrefslogtreecommitdiff
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2023-05-30netfilter: nf_tables: allow up to 64 bytes in the set element data areaPablo Neira Ayuso1-0/+4
2023-05-30netfilter: nftables: statify nft_parse_register()Pablo Neira Ayuso1-1/+0
2023-05-30netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso3-7/+7
2023-05-30netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso4-7/+8
2023-05-17netfilter: nf_tables: deactivate anonymous set from preparation phasePablo Neira Ayuso1-0/+1
2022-06-06netfilter: conntrack: re-fetch conntrack after insertionFlorian Westphal1-1/+6
2022-03-08netfilter: nf_queue: fix possible use-after-freeFlorian Westphal1-1/+1
2022-02-08netfilter: nat: remove l4 protocol port roversFlorian Westphal1-1/+1
2020-10-29netfilter: nf_log: missing vlan offload tag and protoPablo Neira Ayuso1-0/+1
2020-09-09netfilter: nf_tables: fix destination register zeroingFlorian Westphal1-0/+2
2020-05-20netfilter: conntrack: avoid gcc-10 zero-length-bounds warningArnd Bergmann1-1/+1
2019-11-12netfilter: nf_tables: Align nft_expr private data to 64-bitLukas Wunner1-1/+2
2019-09-10netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso1-2/+7
2019-05-16netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal1-0/+2
2019-05-02netfilter: nf_tables: bogus EBUSY when deleting set after flushPablo Neira Ayuso1-0/+6
2019-05-02netfilter: nf_tables: fix set double-free in abort pathPablo Neira Ayuso1-4/+2
2019-05-02netfilter: nft_compat: use .release_ops and remove list of extensionPablo Neira Ayuso1-0/+3
2019-05-02netfilter: nf_tables: unbind set in rule from commit pathPablo Neira Ayuso1-4/+13
2019-05-02netfilter: nf_tables: split set destruction in deactivate and destroy phaseFlorian Westphal1-1/+6
2019-04-05netfilter: physdev: relax br_netfilter dependencyFlorian Westphal1-1/+0
2019-02-27netfilter: nft_flow_offload: fix interaction with vrf slave devicewenxu1-1/+0
2019-01-22netfilter: nf_conncount: speculative garbage collection on empty listsPablo Neira Ayuso1-1/+0
2019-01-22netfilter: nf_conncount: merge lookup and add functionsFlorian Westphal1-15/+3
2018-12-17netfilter: add missing error handling code for register functionsTaehee Yoo2-2/+2
2018-08-29netfilter: nf_tables: rework ct timeout set supportFlorian Westphal1-1/+1
2018-08-16netfilter: nf_tables: fix register orderingFlorian Westphal1-1/+1
2018-08-16netfilter: nft_set: fix allocation size overflow in privsize callback.Taehee Yoo1-2/+2
2018-08-07netfilter: remove ifdef around cttimeout in struct nf_conntrack_l4protoPablo Neira Ayuso1-2/+0
2018-08-07netfilter: cttimeout: decouple timeout policy from nfnetlink_cttimeout objectPablo Neira Ayuso1-9/+13
2018-08-07netfilter: cttimeout: move ctnl_untimeout to nf_conntrackHarsha Sharma1-0/+1
2018-08-03netfilter: use kvmalloc_array to allocate memory for hashtableLi RongQing1-2/+0
2018-07-30netfilter: nf_tables: handle meta/lookup with direct callFlorian Westphal1-0/+7
2018-07-25Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+2
2018-07-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller9-136/+52
2018-07-21Merge ra.kernel.org:/pub/scm/linux/kernel/git/torvalds/linuxDavid S. Miller2-2/+8
2018-07-20netfilter: nf_tables: use dev->name directlyFlorian Westphal1-1/+0
2018-07-18netfilter: Remove useless param helper of nf_ct_helper_ext_addGao Feng1-3/+1
2018-07-18netfilter: nf_conncount: Add list lock and gc worker, and RCU for init tree s...Yi-Hung Wei1-4/+13
2018-07-18netfilter: nf_conncount: Early exit in nf_conncount_lookup() and cleanupYi-Hung Wei1-4/+7
2018-07-18netfilter: nf_conncount: Switch to plain listYi-Hung Wei1-3/+12
2018-07-17netfilter: nf_tables: fix jumpstack depth validationTaehee Yoo1-2/+2
2018-07-17netfilter: conntrack: remove l3proto abstractionFlorian Westphal5-62/+5
2018-07-16netfilter: conntrack: remove get_timeout() indirectionFlorian Westphal2-20/+6
2018-07-16netfilter: conntrack: avoid calls to l4proto invert_tupleFlorian Westphal1-1/+1
2018-07-16netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackersFlorian Westphal1-8/+0
2018-07-16netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackersFlorian Westphal2-8/+0
2018-07-16netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackersFlorian Westphal1-7/+0
2018-07-16netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackersFlorian Westphal2-12/+2
2018-07-16openvswitch: use nf_ct_get_tuplepr, invert_tupleprFlorian Westphal1-7/+0
2018-07-16netfilter: nft_tproxy: Move nf_tproxy_assign_sock() to nf_tproxy.hMáté Eckl1-0/+8