summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-08-28netfilter: nf_reject: don't leak dst refcount for loopback packetsFlorian Westphal1-3/+2
2025-08-28netfilter: nft_reject_inet: allow to use reject from inet ingressPablo Neira Ayuso1-2/+3
2025-06-27netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancyFlorian Westphal1-4/+9
2025-04-10netfilter: socket: Lookup orig tuple for IPv6 SNATMaxim Mikityanskiy1-0/+23
2024-10-17netfilter: ip6t_rpfilter: Fix regression with VRF interfacesPhil Sutter1-1/+3
2024-10-17netfilter: fib: check correct rtable in vrf setupsFlorian Westphal1-2/+3
2024-10-17netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.Guillaume Nault2-0/+3
2024-10-17netfilter: rpfilter/fib: Populate flowic_l3mdev fieldPhil Sutter2-9/+5
2024-10-17netfilter: nf_tables: prevent nf_skb_duplicated corruptionEric Dumazet1-2/+5
2024-10-17netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()Eric Dumazet1-12/+2
2024-10-17inet: inet_defrag: prevent sk release while still in useFlorian Westphal1-1/+1
2024-05-02netfilter: complete validation of user inputEric Dumazet1-0/+4
2024-04-13netfilter: validate user input for expected lengthEric Dumazet1-0/+4
2023-10-10netfilter: nf_tables: add and use nft_sk helperFlorian Westphal1-1/+1
2023-10-10netfilter: use actual socket sk for REJECT actionJan Engelhardt3-4/+6
2023-03-17netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal1-1/+1
2023-03-11netfilter: ebtables: fix table blob use-after-freeFlorian Westphal1-2/+1
2022-10-26netfilter: nft_fib: Fix for rpath check with VRF devicesPhil Sutter1-1/+5
2022-06-29netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-9/+9
2022-06-09lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore1-1/+1
2021-10-27netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6Xin Long1-42/+6
2021-10-17netfilter: ip6_tables: zero-initialize fragment offsetJeremy Sowden1-0/+1
2021-09-22netfilter: socket: icmp6: fix use-after-scopeBenjamin Hesmans1-3/+1
2021-06-23netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-localFlorian Westphal1-4/+18
2021-04-16netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal1-0/+2
2021-03-30Revert "netfilter: x_tables: Update remaining dereference to RCU"Mark Tomlinson1-1/+1
2021-03-30Revert "netfilter: x_tables: Switch synchronization to RCU"Mark Tomlinson1-7/+7
2021-01-12netfilter: x_tables: Update remaining dereference to RCUSubash Abhinov Kasiviswanathan1-1/+1
2020-12-08netfilter: x_tables: Switch synchronization to RCUSubash Abhinov Kasiviswanathan1-7/+7
2020-11-19ipv6: Remove dependency of ipv6_frag_thdr_truncated on ipv6 moduleGeorg Kohmann1-1/+1
2020-11-16ipv6/netfilter: Discard first fragment not including all headersGeorg Kohmann1-0/+9
2020-10-30netfilter: use actual socket sk rather than skb sk when routing harderJason A. Donenfeld1-1/+1
2020-10-20netfilter: Drop fragmented ndisc packets assembled in netfilterGeorg Kohmann1-0/+1
2020-10-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+5
2020-10-14netfilter: nf_log: missing vlan offload tag and protoPablo Neira Ayuso1-3/+5
2020-08-28netfilter: ip6t_NPT: rewrite addresses in ICMPv6 original packetMichael Zhou1-0/+39
2020-08-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-nextLinus Torvalds6-83/+59
2020-08-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller4-8/+4
2020-07-29netfilter: ip6tables: Remove redundant null checksGaurav Singh4-8/+4
2020-07-28net: remove sockptr_advanceChristoph Hellwig1-4/+4
2020-07-25netfilter: switch nf_setsockopt to sockptr_tChristoph Hellwig1-12/+12
2020-07-25netfilter: switch xt_copy_counters to sockptr_tChristoph Hellwig1-3/+3
2020-07-20netfilter: remove the compat argument to xt_copy_counters_from_userChristoph Hellwig1-2/+1
2020-07-20netfilter/ip6_tables: clean up compat {get, set}sockopt handlingChristoph Hellwig1-66/+21
2020-07-16treewide: Remove uninitialized_var() usageKees Cook1-1/+1
2020-06-30netfilter: introduce support for reject at prerouting stageLaura Garcia Liebana1-0/+26
2020-06-25netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.David Wilder5-6/+44
2020-06-25netfilter: ip6tables: Split ip6t_unregister_table() into pre_exit and exit he...David Wilder1-1/+14
2020-06-25netfilter: Add MODULE_DESCRIPTION entries to kernel modulesRob Gill5-0/+5
2020-06-13treewide: replace '---help---' in Kconfig files with 'help'Masahiro Yamada1-3/+3
generated by cgit v1.2.3 (git 2.39.0) at 2026-01-17 11:57:15 +0300