summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-08-28netfilter: nf_reject: don't leak dst refcount for loopback packetsFlorian Westphal1-4/+2
2025-08-28netfilter: nft_reject_inet: allow to use reject from inet ingressPablo Neira Ayuso1-2/+4
2024-10-17netfilter: fib: check correct rtable in vrf setupsFlorian Westphal1-3/+1
2024-10-17netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.Guillaume Nault2-0/+2
2024-10-17netfilter: rpfilter/fib: Populate flowic_l3mdev fieldPhil Sutter2-2/+2
2024-10-17netfilter: nf_tables: prevent nf_skb_duplicated corruptionEric Dumazet1-2/+5
2024-06-16netfilter: tproxy: bail out if IP has been disabled on the deviceFlorian Westphal1-0/+2
2024-05-02netfilter: complete validation of user inputEric Dumazet2-0/+8
2024-04-13netfilter: validate user input for expected lengthEric Dumazet2-0/+8
2023-10-10netfilter: nf_tables: add and use nft_sk helperFlorian Westphal1-1/+1
2023-10-10netfilter: use actual socket sk for REJECT actionJan Engelhardt3-5/+7
2023-03-17netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal1-1/+1
2023-03-11netfilter: ebtables: fix table blob use-after-freeFlorian Westphal1-2/+1
2022-12-02netfilter: conntrack: Fix data-races around ct markDaniel Xu1-2/+2
2022-10-26netfilter: nft_fib: Fix for rpath check with VRF devicesPhil Sutter1-0/+3
2022-06-29netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-9/+9
2022-01-27netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()Xin Xiong1-1/+4
2021-04-21netfilter: arp_tables: add pre_exit hook for table unregisterFlorian Westphal2-3/+16
2021-04-16netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2-0/+4
2021-03-30Revert "netfilter: x_tables: Update remaining dereference to RCU"Mark Tomlinson2-2/+2
2021-03-30Revert "netfilter: x_tables: Switch synchronization to RCU"Mark Tomlinson2-14/+14
2021-01-27netfilter: rpfilter: mask ecn bits before fib lookupGuillaume Nault1-1/+1
2021-01-12netfilter: x_tables: Update remaining dereference to RCUSubash Abhinov Kasiviswanathan2-2/+2
2020-12-08netfilter: x_tables: Switch synchronization to RCUSubash Abhinov Kasiviswanathan2-14/+14
2020-10-30netfilter: use actual socket sk rather than skb sk when routing harderJason A. Donenfeld2-2/+2
2020-10-14netfilter: nf_log: missing vlan offload tag and protoPablo Neira Ayuso2-4/+21
2020-08-28netfilter: delete repeated wordsRandy Dunlap1-1/+1
2020-08-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-nextLinus Torvalds4-151/+81
2020-07-28net: remove sockptr_advanceChristoph Hellwig2-8/+8
2020-07-28netfilter: arp_tables: restore a SPDX identifierChristoph Hellwig1-1/+1
2020-07-25netfilter: switch nf_setsockopt to sockptr_tChristoph Hellwig2-26/+26
2020-07-25netfilter: switch xt_copy_counters to sockptr_tChristoph Hellwig2-8/+6
2020-07-20netfilter: remove the compat argument to xt_copy_counters_from_userChristoph Hellwig2-4/+2
2020-07-20netfilter/ip_tables: clean up compat {get,set}sockopt handlingChristoph Hellwig1-65/+21
2020-07-20netfilter/arp_tables: clean up compat {get, set}sockopt handlingChristoph Hellwig1-64/+21
2020-07-16treewide: Remove uninitialized_var() usageKees Cook1-3/+3
2020-07-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-0/+21
2020-07-06Replace HTTP links with HTTPS ones: IPv*Alexander A. Klimov1-1/+1
2020-06-30netfilter: introduce support for reject at prerouting stageLaura Garcia Liebana1-0/+21
2020-06-25netfilter: iptables: Add a .pre_exit hook in all iptable_foo.c.David Wilder5-7/+44
2020-06-25netfilter: iptables: Split ipt_unregister_table() into pre_exit and exit help...David Wilder1-1/+14
2020-06-25netfilter: Add MODULE_DESCRIPTION entries to kernel modulesRob Gill5-0/+5
2020-06-13treewide: replace '---help---' in Kconfig files with 'help'Masahiro Yamada1-8/+8
2020-05-25netfilter: nf_conntrack_pptp: prevent buffer overflows in debug codePablo Neira Ayuso1-5/+2
2020-03-15netfilter: Replace zero-length array with flexible-array memberGustavo A. R. Silva2-4/+4
2020-03-13inet: Use fallthrough;Joe Perches2-3/+3
2020-02-04proc: convert everything to "struct proc_ops"Alexey Dobriyan1-8/+8
2020-01-13netfilter: arp_tables: init netns pointer in xt_tgdtor_param structFlorian Westphal1-9/+10
2019-12-30netfilter: arp_tables: init netns pointer in xt_tgchk_param structFlorian Westphal1-11/+16
2019-11-16netfilter: nf_flow_table_offload: add IPv6 supportPablo Neira Ayuso1-1/+1
generated by cgit v1.2.3 (git 2.39.0) at 2026-01-17 02:23:30 +0300