summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
4 daysnetfilter: xtables: avoid NFPROTO_UNSPEC where neededFlorian Westphal16-165/+422
4 daysnetfilter: nf_nat: don't try nat source port reallocation for reverse dir clashFlorian Westphal1-2/+118
11 daysnetfilter: nf_tables: do not remove elements if set backend implements .abortPablo Neira Ayuso1-1/+4
2024-10-04netfilter: nf_tables: missing objects with no memcg accountingPablo Neira Ayuso7-15/+17
2024-10-04netfilter: nf_tables: use rcu chain hook list iterator from netlink dump pathPablo Neira Ayuso1-1/+1
2024-10-04netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_E...Simon Horman1-5/+2
2024-10-04netfilter: nf_tables: Keep deleted flowtable hooks until after RCUPhil Sutter1-1/+1
2024-10-04netfilter: nft_dynset: annotate data-races around set timeoutPablo Neira Ayuso1-3/+3
2024-10-04netfilter: nf_tables: remove annotation to access set timeout while holding lockPablo Neira Ayuso1-2/+2
2024-10-04netfilter: nf_tables: reject expiration higher than timeoutPablo Neira Ayuso1-0/+3
2024-10-04netfilter: nf_tables: reject element expiration with no timeoutPablo Neira Ayuso1-0/+3
2024-10-04netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso1-1/+1
2024-10-04netfilter: nf_tables: store new sets in dedicated listFlorian Westphal1-9/+20
2024-09-30netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtre...Dan Carpenter1-2/+2
2024-09-12net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_...Lorenzo Bianconi2-1/+7
2024-09-12netfilter: nft_socket: make cgroupsv2 matching work with namespacesFlorian Westphal1-3/+38
2024-09-12netfilter: nft_socket: fix sk refcount leaksFlorian Westphal1-3/+4
2024-08-22netfilter: flowtable: validate vlan headerPablo Neira Ayuso2-0/+6
2024-08-20netfilter: nft_counter: Synchronize nft_counter_reset() against reader.Sebastian Andrzej Siewior1-0/+5
2024-08-20netfilter: nft_counter: Disable BH in nft_counter_offload_stats().Sebastian Andrzej Siewior1-2/+2
2024-08-15netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requestsPhil Sutter1-13/+59
2024-08-15netfilter: nf_tables: Introduce nf_tables_getobj_singlePhil Sutter1-31/+44
2024-08-15netfilter: nf_tables: Audit log dump reset after the factPhil Sutter1-15/+13
2024-08-15netfilter: nf_queue: drop packets with cloned unconfirmed conntracksFlorian Westphal1-2/+33
2024-08-15netfilter: flowtable: initialise extack before useDonald Hunter1-1/+1
2024-08-15netfilter: nfnetlink: Initialise extack before use in ACKsDonald Hunter1-1/+4
2024-07-25Merge tag 'net-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-2/+10
2024-07-24sysctl: treewide: constify the ctl_table argument of proc_handlersJoel Granados4-9/+9
2024-07-24netfilter: nft_set_pipapo_avx2: disable softinterruptsFlorian Westphal1-2/+10
2024-07-22Merge tag 'mm-nonmm-stable-2024-07-21-15-07' of git://git.kernel.org/pub/scm/...Linus Torvalds1-1/+1
2024-07-18ipvs: properly dereference pe in ip_vs_add_serviceChen Hanxiao1-5/+5
2024-07-17netfilter: nf_set_pipapo: fix initial map fillFlorian Westphal3-6/+29
2024-07-17netfilter: ctnetlink: use helper function to calculate expect IDPablo Neira Ayuso1-1/+2
2024-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-146/+14
2024-07-11netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal1-145/+13
2024-07-11netfilter: nfnetlink_queue: drop bogus WARN_ONFlorian Westphal1-1/+1
2024-07-09Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf...Paolo Abeni5-3/+276
2024-07-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+1
2024-07-04netfilter: nf_tables: unconditionally flush pending work before notifierFlorian Westphal1-2/+1
2024-07-01netfilter: Add bpf_xdp_flow_lookup kfuncLorenzo Bianconi3-1/+127
2024-07-01netfilter: nf_tables: Add flowtable map for xdp offloadFlorian Westphal3-2/+149
2024-07-01Merge tag 'nf-next-24-06-28' of git://git.kernel.org/pub/scm/linux/kernel/git...David S. Miller7-201/+275
2024-06-29kernel-wide: fix spelling mistakes like "assocative" -> "associative"Jesse Brandeburg1-1/+1
2024-06-28netfilter: xt_recent: Lift restrictions on max hitcount valuePhil Sutter1-4/+4
2024-06-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-5/+9
2024-06-27netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso2-5/+6
2024-06-26netfilter: cttimeout: remove 'l3num' attr checkLin Ma1-2/+1
2024-06-26netfilter: nf_conncount: fix wrong variable typeYunjian Wang1-5/+3
2024-06-26ipvs: Avoid unnecessary calls to skb_is_gso_sctpIsmael Luceno1-2/+2
2024-06-25netfilter: nf_tables: do not store nft_ctx in transaction objectsFlorian Westphal2-62/+86