summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-12-07netfilter: nf_reject: don't reply to icmp error messagesFlorian Westphal1-0/+25
2025-08-28netfilter: nf_reject: don't leak dst refcount for loopback packetsFlorian Westphal1-4/+2
2024-10-17netfilter: fib: check correct rtable in vrf setupsFlorian Westphal1-3/+1
2024-10-17netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.Guillaume Nault2-0/+2
2024-10-17netfilter: rpfilter/fib: Populate flowic_l3mdev fieldPhil Sutter2-2/+2
2024-10-17netfilter: nf_tables: prevent nf_skb_duplicated corruptionEric Dumazet1-2/+5
2024-08-19netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().Kuniyuki Iwashima1-8/+10
2024-06-16netfilter: tproxy: bail out if IP has been disabled on the deviceFlorian Westphal1-0/+2
2024-04-17netfilter: complete validation of user inputEric Dumazet2-0/+8
2024-04-10netfilter: validate user input for expected lengthEric Dumazet2-0/+8
2024-03-06netfilter: let reset rules clean out conntrack entriesFlorian Westphal1-0/+1
2023-03-17netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal1-1/+1
2023-03-11netfilter: x_tables: fix percpu counter block leak on error path when creatin...Pavel Tikhomirov2-0/+8
2023-03-11netfilter: ebtables: fix table blob use-after-freeFlorian Westphal1-2/+1
2022-12-02netfilter: conntrack: Fix data-races around ct markDaniel Xu1-2/+2
2022-10-26netfilter: nft_fib: Fix for rpath check with VRF devicesPhil Sutter1-0/+3
2022-07-29ip: Fix data-races around sysctl_ip_default_ttl.Kuniyuki Iwashima1-2/+2
2022-01-27netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()Xin Xiong1-1/+4
2021-09-28netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1Florian Westphal1-21/+9
2021-09-21netfilter: iptable_raw: drop bogus net_init annotationFlorian Westphal1-1/+1
2021-08-25netfilter: x_tables: handle xt_register_template() returning an error valueLukas Bulwahn1-0/+2
2021-08-09netfilter: x_tables: never register tables by defaultFlorian Westphal6-63/+65
2021-08-01netfilter: ipt_CLUSTERIP: use clusterip_net to store pernet warningFlorian Westphal1-2/+3
2021-08-01netfilter: ipt_CLUSTERIP: only add arp mangle hook when requiredFlorian Westphal1-17/+34
2021-05-29netfilter: nf_tables: add and use nft_sk helperFlorian Westphal1-1/+1
2021-05-04netfilter: arptables: use pernet ops struct during unregisterFlorian Westphal2-4/+3
2021-04-26netfilter: allow to turn off xtables compat layerFlorian Westphal3-20/+20
2021-04-26netfilter: arp_tables: pass table pointer via nf_hook_opsFlorian Westphal2-18/+31
2021-04-26netfilter: ip_tables: pass table pointer via nf_hook_opsFlorian Westphal6-52/+65
2021-04-26netfilter: xt_nat: pass table to hookfnFlorian Westphal1-10/+34
2021-04-26netfilter: x_tables: remove paranoia testsFlorian Westphal6-18/+0
2021-04-26netfilter: arptables: unregister the tables by nameFlorian Westphal2-10/+12
2021-04-26netfilter: iptables: unregister the tables by nameFlorian Westphal6-32/+20
2021-04-26netfilter: x_tables: remove ipt_unregister_tableFlorian Westphal2-10/+1
2021-04-26netfilter: disable defrag once its no longer neededFlorian Westphal1-6/+24
2021-04-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-3/+20
2021-04-13netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2-0/+4
2021-04-10netfilter: arp_tables: add pre_exit hook for table unregisterFlorian Westphal2-3/+16
2021-04-06netfilter: nf_defrag_ipv4: use net_generic infraFlorian Westphal1-5/+15
2021-03-31netfilter: nf_log_arp: merge with nf_log_syslogFlorian Westphal3-176/+4
2021-03-31netfilter: nf_log_ipv4: rename to nf_log_syslogFlorian Westphal3-397/+4
2021-03-15Revert "netfilter: x_tables: Switch synchronization to RCU"Mark Tomlinson2-14/+14
2021-03-15Revert "netfilter: x_tables: Update remaining dereference to RCU"Mark Tomlinson2-2/+2
2021-01-28netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-9/+9
2021-01-20netfilter: rpfilter: mask ecn bits before fib lookupGuillaume Nault1-1/+1
2020-12-17netfilter: x_tables: Update remaining dereference to RCUSubash Abhinov Kasiviswanathan2-2/+2
2020-12-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski3-5/+7
2020-12-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-14/+14
2020-12-08netfilter: x_tables: Switch synchronization to RCUSubash Abhinov Kasiviswanathan2-14/+14
2020-12-01netfilter: use actual socket sk for REJECT actionJan Engelhardt3-5/+7