summaryrefslogtreecommitdiff
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2024-03-06netfilter: let reset rules clean out conntrack entriesFlorian Westphal1-0/+8
2024-03-01netfilter: nft_flow_offload: reset dst in route object after setting up flowPablo Neira Ayuso1-1/+1
2024-03-01netfilter: flowtable: simplify route logicPablo Neira Ayuso1-2/+2
2024-02-05netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEVPablo Neira Ayuso1-0/+2
2024-01-10net/sched: act_ct: Always fill offloading tuple iifidxVlad Buslov1-13/+17
2024-01-10net/sched: act_ct: Take per-cb reference to tcf_ct_flow_tableVlad Buslov1-0/+10
2024-01-10netfilter: flowtable: GC pushes back packets to classic pathPablo Neira Ayuso1-0/+1
2024-01-10net/sched: act_ct: Fix promotion of offloaded unreplied tuplePaul Blakey1-1/+1
2024-01-10netfilter: flowtable: cache info of last offloadVlad Buslov1-3/+4
2024-01-10netfilter: flowtable: allow unidirectional rulesVlad Buslov1-0/+1
2024-01-10netfilter: nf_tables: set transport offset from mac header for netdev/egressPablo Neira Ayuso1-1/+1
2024-01-10netfilter: use skb_ip_totlen and iph_totlenXin Long1-2/+2
2023-11-28netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()Dan Carpenter1-2/+2
2023-11-20netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate e...Jeremy Sowden1-2/+1
2023-10-06netfilter: nf_tables: fix kdoc warnings after gc reworkFlorian Westphal1-0/+1
2023-10-06netfilter: nf_tables: fix memleak when more than 255 elements expiredFlorian Westphal1-1/+1
2023-10-06netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GCPablo Neira Ayuso1-2/+3
2023-10-06netfilter: nf_tables: defer gc run if previous batch is still pendingFlorian Westphal1-0/+5
2023-10-06netfilter: nf_tables: remove busy mark and gc batch APIPablo Neira Ayuso1-95/+3
2023-10-06netfilter: nf_tables: GC transaction API to avoid race with control planePablo Neira Ayuso1-1/+63
2023-08-16netfilter: nf_tables: report use refcount overflowPablo Neira Ayuso1-4/+27
2023-06-28netfilter: nf_tables: reject unbound anonymous set before commit phasePablo Neira Ayuso1-0/+3
2023-06-28netfilter: nf_tables: drop map element references from preparation phasePablo Neira Ayuso1-1/+4
2023-06-28netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chainPablo Neira Ayuso1-0/+2
2023-06-28netfilter: nf_tables: fix chain binding transaction logicPablo Neira Ayuso1-1/+20
2023-06-21netfilter: nf_tables: integrate pipapo into commit protocolPablo Neira Ayuso1-1/+3
2023-05-11netfilter: nf_tables: deactivate anonymous set from preparation phasePablo Neira Ayuso1-0/+1
2023-05-11netfilter: conntrack: fix wrong ct->timeout valueTzung-Bi Shih1-1/+5
2023-04-26netfilter: nf_tables: validate catch-all set elementsPablo Neira Ayuso1-0/+4
2023-03-17netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal1-0/+7
2023-01-12netfilter: nf_tables: honor set timeout and garbage collection updatesPablo Neira Ayuso1-1/+12
2023-01-12netfilter: nf_tables: consolidate set descriptionPablo Neira Ayuso1-0/+12
2022-10-12treewide: use get_random_u32() when possibleJason A. Donenfeld1-1/+1
2022-10-03Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-1/+24
2022-10-03net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.cLorenzo Bianconi1-0/+19
2022-09-21bpf: Move nf_conn extern declarations to filter.hDaniel Xu1-7/+0
2022-09-21bpf: Rename nfct_bsa to nfct_btf_struct_accessDaniel Xu1-4/+4
2022-09-21bpf: Remove unused btf_struct_access stubDaniel Xu1-12/+0
2022-09-11bpf: Add support for writing to nf_conn:markDaniel Xu1-0/+23
2022-09-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller1-0/+1
2022-09-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni1-2/+0
2022-09-07netfilter: nat: move repetitive nat port reserve loop to a helperFlorian Westphal1-0/+1
2022-08-31netfilter: remove nf_conntrack_helper sysctl and modparam togglesPablo Neira Ayuso1-2/+0
2022-08-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-0/+4
2022-08-24netfilter: flowtable: fix stuck flows on cleanup due to pending workPablo Neira Ayuso1-0/+2
2022-08-24netfilter: flowtable: add function to invoke garbage collection immediatelyPablo Neira Ayuso1-0/+1
2022-08-24netfilter: nf_tables: make table handle allocation per-netns friendlyPablo Neira Ayuso1-0/+1
2022-08-18Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-6/+0
2022-08-09netfilter: nf_tables: disallow jump to implicit chain from set elementPablo Neira Ayuso1-0/+5
2022-08-09netfilter: nf_tables: upfront validation of data via nft_data_init()Pablo Neira Ayuso1-2/+2