summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-12-07netfilter: nf_reject: don't reply to icmp error messagesFlorian Westphal1-0/+30
2025-08-28netfilter: nf_reject: don't leak dst refcount for loopback packetsFlorian Westphal1-3/+2
2025-06-27netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancyFlorian Westphal1-4/+9
2025-04-10netfilter: socket: Lookup orig tuple for IPv6 SNATMaxim Mikityanskiy1-0/+23
2024-10-17netfilter: ip6t_rpfilter: Fix regression with VRF interfacesPhil Sutter1-1/+3
2024-10-17netfilter: fib: check correct rtable in vrf setupsFlorian Westphal1-2/+3
2024-10-17netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.Guillaume Nault2-0/+3
2024-10-17netfilter: rpfilter/fib: Populate flowic_l3mdev fieldPhil Sutter2-9/+5
2024-10-17netfilter: nf_tables: prevent nf_skb_duplicated corruptionEric Dumazet1-2/+5
2024-10-17netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()Eric Dumazet1-12/+2
2024-10-17inet: inet_defrag: prevent sk release while still in useFlorian Westphal1-1/+1
2024-09-04netfilter: allow ipv6 fragments to arrive on different devicesTom Hughes1-0/+4
2024-08-19netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().Kuniyuki Iwashima1-5/+9
2024-04-17netfilter: complete validation of user inputEric Dumazet1-0/+4
2024-04-10netfilter: validate user input for expected lengthEric Dumazet1-0/+4
2024-03-06netfilter: let reset rules clean out conntrack entriesFlorian Westphal1-0/+1
2023-03-17netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal1-1/+1
2023-03-11netfilter: x_tables: fix percpu counter block leak on error path when creatin...Pavel Tikhomirov1-0/+4
2023-03-11netfilter: ebtables: fix table blob use-after-freeFlorian Westphal1-2/+1
2022-10-26netfilter: nft_fib: Fix for rpath check with VRF devicesPhil Sutter1-1/+5
2021-10-15netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6Xin Long1-42/+6
2021-09-28netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1Florian Westphal2-17/+10
2021-09-15netfilter: ip6_tables: zero-initialize fragment offsetJeremy Sowden1-0/+1
2021-09-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfJakub Kicinski1-3/+1
2021-09-03netfilter: socket: icmp6: fix use-after-scopeBenjamin Hesmans1-3/+1
2021-08-09netfilter: x_tables: never register tables by defaultFlorian Westphal5-51/+56
2021-06-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-4/+18
2021-06-09netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-localFlorian Westphal1-4/+18
2021-05-29netfilter: nf_tables: add and use nft_sk helperFlorian Westphal1-1/+1
2021-05-29netfilter: x_tables: reduce xt_action_param by 8 byteFlorian Westphal1-1/+1
2021-04-26netfilter: allow to turn off xtables compat layerFlorian Westphal1-8/+8
2021-04-26netfilter: ip6_tables: pass table pointer via nf_hook_opsFlorian Westphal6-54/+61
2021-04-26netfilter: xt_nat: pass table to hookfnFlorian Westphal1-10/+35
2021-04-26netfilter: x_tables: remove paranoia testsFlorian Westphal5-15/+0
2021-04-26netfilter: ip6tables: unregister the tables by nameFlorian Westphal6-33/+22
2021-04-26netfilter: x_tables: remove ipt_unregister_tableFlorian Westphal2-10/+1
2021-04-26netfilter: disable defrag once its no longer neededFlorian Westphal1-6/+23
2021-04-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+2
2021-04-13netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal1-0/+2
2021-04-06netfilter: nf_defrag_ipv6: use net_generic infraFlorian Westphal2-37/+46
2021-03-31netfilter: nf_log_ipv6: merge with nf_log_syslogFlorian Westphal3-431/+4
2021-03-15Revert "netfilter: x_tables: Switch synchronization to RCU"Mark Tomlinson1-7/+7
2021-03-15Revert "netfilter: x_tables: Update remaining dereference to RCU"Mark Tomlinson1-1/+1
2021-01-28netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-9/+9
2020-12-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfJakub Kicinski1-1/+1
2020-12-17netfilter: x_tables: Update remaining dereference to RCUSubash Abhinov Kasiviswanathan1-1/+1
2020-12-16Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+1
2020-12-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski3-4/+6
2020-12-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-7/+7
2020-12-08netfilter: x_tables: Switch synchronization to RCUSubash Abhinov Kasiviswanathan1-7/+7