summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
3 daysnetfilter: nf_tables: add .abort_skip_removal flag for set typesPablo Neira Ayuso2-1/+4
4 daysnetfilter: nf_tables: fix use-after-free in nf_tables_addchain()Inseo An1-0/+1
4 daysipvs: do not keep dest_dst if dev is going downJulian Anastasov1-10/+36
4 daysipvs: skip ipv6 extension headers for csum checksJulian Anastasov3-39/+20
4 daysnetfilter: nf_conntrack_h323: don't pass uninitialised l3num valueFlorian Westphal1-5/+5
4 daysnetfilter: nf_tables: revert commit_mutex usage in reset pathBrian Witte1-206/+42
4 daysnetfilter: nft_quota: use atomic64_xchg for resetBrian Witte1-6/+7
4 daysnetfilter: nft_counter: serialize reset with spinlockBrian Witte1-4/+16
4 daysnetfilter: nft_set_rbtree: validate open interval overlapPablo Neira Ayuso2-14/+78
4 daysnetfilter: nft_set_rbtree: validate element belonging to intervalPablo Neira Ayuso1-4/+143
4 daysnetfilter: nft_set_rbtree: don't gc elements on insertFlorian Westphal1-68/+68
4 daysnetfilter: nft_set_rbtree: remove seqcount_rwlock_tPablo Neira Ayuso1-6/+0
4 daysnetfilter: nft_set_rbtree: use binary search array in get commandPablo Neira Ayuso1-90/+64
4 daysnetfilter: nft_set_rbtree: translate rbtree to array for binary searchPablo Neira Ayuso1-84/+257
4 daysnetfilter: nft_set_rbtree: check for partial overlaps in anonymous setsPablo Neira Ayuso1-5/+25
4 daysnetfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null intervalPablo Neira Ayuso2-0/+18
4 daysnetfilter: nft_counter: fix reset of counters on 32bit archsAnders Grahn1-2/+2
4 daysnetfilter: nft_set_hash: fix get operation on big endianFlorian Westphal1-2/+7
4 daysnetfilter: nfnetlink_queue: do shared-unconfirmed check before segmentationFlorian Westphal1-49/+74
4 daysnetfilter: nfnetlink_queue: optimize verdict lookup with hash tableScott Mitchell1-30/+116
4 daysnetfilter: nf_conncount: fix tracking of connections from localhostFernando Fernandez Mancera1-2/+13
4 daysnetfilter: nft_compat: add more restrictions on netlink attributesFlorian Westphal1-3/+10
4 daysnetfilter: nf_conncount: increase the connection clean up limit to 64Fernando Fernandez Mancera1-5/+10
4 daysnetfilter: nf_tables: reset table validation state on abortFlorian Westphal1-0/+7
2026-02-05netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()Andrew Fasano1-1/+1
2026-01-02netfilter: nf_conncount: update last_gc only when GC has been performedFernando Fernandez Mancera1-1/+1
2026-01-02netfilter: nf_tables: fix memory leak in nf_tables_newrule()Zilin Guan1-1/+2
2026-01-01netfilter: replace -EEXIST with -EBUSYDaniel Gomez2-3/+3
2026-01-01netfilter: nft_synproxy: avoid possible data-race on update operationFernando Fernandez Mancera1-3/+3
2026-01-01netfilter: nft_set_pipapo: fix range overlap detectionFlorian Westphal1-2/+2
2025-12-15netfilter: nf_tables: avoid softlockup warnings in nft_chain_validateFlorian Westphal1-2/+2
2025-12-15netfilter: nf_tables: avoid chain re-validation if possibleFlorian Westphal1-4/+65
2025-12-11netfilter: nf_tables: remove redundant chain validation on register storePablo Neira Ayuso1-11/+0
2025-12-11netfilter: nf_nat: remove bogus direction checkFlorian Westphal1-13/+1
2025-12-10netfilter: always set route tuple out ifindexLorenzo Bianconi1-1/+3
2025-12-10ipvs: fix ipv4 null-ptr-deref in route error pathSlavin Liu1-0/+3
2025-12-10netfilter: nf_conncount: fix leaked ct in error pathsFernando Fernandez Mancera1-11/+14
2025-12-10netfilter: conntrack: warn when cleanup is stuckJakub Kicinski1-0/+3
2025-11-29Merge tag 'nf-next-25-11-28' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski9-400/+762
2025-11-29net: Remove KMSG_COMPONENT macroHeiko Carstens30-60/+30
2025-11-28netfilter: nft_connlimit: add support to object update operationFernando Fernandez Mancera1-1/+12
2025-11-28netfilter: nft_connlimit: update the count if add was skippedFernando Fernandez Mancera2-6/+19
2025-11-28netfilter: nf_conncount: make nf_conncount_gc_list() to disable BHFernando Fernandez Mancera2-13/+18
2025-11-28netfilter: nf_conncount: rework API to use sk_buff directlyFernando Fernandez Mancera3-86/+126
2025-11-28netfilter: flowtable: Add IPIP tx sw accelerationLorenzo Bianconi2-4/+106
2025-11-28netfilter: flowtable: Add IPIP rx sw accelerationLorenzo Bianconi3-13/+97
2025-11-28netfilter: flowtable: use tuple address to calculate next hopPablo Neira Ayuso1-4/+12
2025-11-28netfilter: flowtable: remove hw_ifidxPablo Neira Ayuso3-5/+1
2025-11-28netfilter: flowtable: inline pppoe encapsulation in xmit pathPablo Neira Ayuso2-7/+44
2025-11-28netfilter: flowtable: inline vlan encapsulation in xmit pathPablo Neira Ayuso2-3/+29