summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)AuthorFilesLines
2023-05-30netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-9/+9
2022-10-26netfilter: nft_fib: Fix for rpath check with VRF devicesPhil Sutter1-1/+5
2021-10-17netfilter: ip6_tables: zero-initialize fragment offsetJeremy Sowden1-0/+1
2021-09-22netfilter: socket: icmp6: fix use-after-scopeBenjamin Hesmans1-3/+1
2021-04-16netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal1-0/+2
2021-03-30Revert "netfilter: x_tables: Update remaining dereference to RCU"Mark Tomlinson1-1/+1
2021-03-30Revert "netfilter: x_tables: Switch synchronization to RCU"Mark Tomlinson1-7/+7
2021-01-12netfilter: x_tables: Update remaining dereference to RCUSubash Abhinov Kasiviswanathan1-1/+1
2020-12-30netfilter: x_tables: Switch synchronization to RCUSubash Abhinov Kasiviswanathan1-7/+7
2020-11-18netfilter: use actual socket sk rather than skb sk when routing harderJason A. Donenfeld3-3/+3
2020-10-29netfilter: nf_log: missing vlan offload tag and protoPablo Neira Ayuso1-3/+5
2019-11-20netfilter: masquerade: don't flush all conntracks if only one address deleted...Tan Hu1-3/+16
2019-08-16netfilter: Fix rpfilter dropping vrf packets by mistakeMiaohe Lin1-2/+6
2019-07-10netfilter: ipv6: nf_defrag: accept duplicate fragments againGuillaume Nault1-3/+7
2019-07-10netfilter: ipv6: nf_defrag: fix leakage of unqueued fragmentsGuillaume Nault1-7/+5
2019-05-04netfilter: ip6t_srh: fix NULL pointer dereferencesKangjie Lu1-0/+6
2019-04-27net: IP6 defrag: use rbtrees in nf_conntrack_reasm.cPeter Oskolkov1-189/+71
2018-12-17netfilter: nat: fix double register in masquerade modulesTaehee Yoo1-7/+16
2018-12-17netfilter: add missing error handling code for register functionsTaehee Yoo3-12/+32
2018-12-17ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changesJiri Wiesner1-1/+7
2018-11-27netfilter: ipv6: fix oops when defragmenting locally generated fragmentsFlorian Westphal1-4/+9
2018-09-10ip: frags: fix crash in ip_do_fragment()Taehee Yoo1-0/+1
2018-08-16netfilter: ip6t_rpfilter: set F_IFACE for linklocal addressesFlorian Westphal1-1/+11
2018-08-06ipv6: defrag: drop non-last frags smaller than min mtuFlorian Westphal1-0/+4
2018-08-06ip: use rb trees for IP frag queue.Peter Oskolkov1-0/+1
2018-07-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller6-879/+17
2018-07-21Merge ra.kernel.org:/pub/scm/linux/kernel/git/torvalds/linuxDavid S. Miller3-6/+15
2018-07-18ipv6: remove dependency of nf_defrag_ipv6 on ipv6 moduleFlorian Westphal2-7/+13
2018-07-17netfilter: conntrack: remove l3proto abstractionFlorian Westphal4-771/+4
2018-07-16netfilter: conntrack: remove get_timeout() indirectionFlorian Westphal1-4/+10
2018-07-16netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackersFlorian Westphal1-29/+0
2018-07-16netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackersFlorian Westphal2-12/+1
2018-07-16netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackersFlorian Westphal1-18/+0
2018-07-16netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackersFlorian Westphal2-49/+0
2018-07-09netfilter: ipv6: nf_defrag: drop skb dst before queueingFlorian Westphal1-0/+2
2018-07-06netfilter: nf_tproxy: fix possible non-linear access to transport headerMáté Eckl1-6/+12
2018-07-05netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal1-0/+1
2018-07-03Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+3
2018-06-28netfilter: check if the socket netns is correct.Flavio Leitner1-4/+4
2018-06-18netfilter: ipv6: nf_defrag: reduce struct net memory wasteEric Dumazet1-3/+3
2018-06-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-0/+1
2018-06-08netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+1
2018-06-03netfilter: Libify xt_TPROXYMáté Eckl3-1/+151
2018-05-29netfilter: nat: merge ipv4/ipv6 masquerade code into main nat moduleFlorian Westphal3-9/+2
2018-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller5-154/+114
2018-05-23netfilter: ip6t_rpfilter: provide input interface for route lookupVincent Bernat1-0/+2
2018-05-23netfilter: nf_nat: add nat type hooks to nat coreFlorian Westphal3-112/+103
2018-05-23netfilter: nf_tables: allow chain type to override hook registerFlorian Westphal1-6/+14
2018-05-23netfilter: xtables: allow table definitions not backed by hook_opsFlorian Westphal1-1/+4
2018-05-23netfilter: nf_nat: move common nat code to nat coreFlorian Westphal1-46/+2