summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
8 daysnetfilter: ipset: do not update comments from kernel-side hash addsDavid Lee1-1/+1
8 daysipvs: do not propagate one-packet flag to synced connsZhiling Zou1-0/+3
8 daysnetfilter: nft_payload: fix mask build for partial field offloadXiang Mei (Microsoft)1-11/+1
8 daysipvs: clear the nfct flag under lockJulian Anastasov1-2/+8
8 daysipvs: do not mangle ICMP replies for non-first fragmentsJulian Anastasov2-46/+43
8 daysipvs: fix places with wrong packet offsetsJulian Anastasov6-87/+88
8 daysipvs: fix the checksum validationsJulian Anastasov4-84/+45
8 daysnetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCHPablo Neira Ayuso1-1/+15
8 daysnetfilter: nf_tables: make nft_object rhltable per tablePablo Neira Ayuso1-18/+16
8 daysipvs: adjust double hashing when fwd method changesJulian Anastasov1-42/+147
8 daysnetfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()Pablo Neira Ayuso2-15/+40
8 daysnetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()Xiang Mei2-2/+2
2026-07-24ipvs: reload ip header after head reallocationFlorian Westphal1-4/+2
2026-07-24ipvs: fix more places with wrong ipv6 transport offsetsJulian Anastasov2-8/+5
2026-07-24ipvs: reset full ip_vs_seq structs in ip_vs_conn_newYizhou Zhao1-2/+2
2026-07-24ipvs: use parsed transport offset in SCTP state lookupYizhou Zhao1-10/+5
2026-07-24netfilter: nfnetlink_cthelper: cap to maximum number of expectation per maste...Pablo Neira Ayuso1-0/+2
2026-07-24netfilter: nfnetlink_cthelper: cap to maximum number of expectation per masterPablo Neira Ayuso1-0/+2
2026-07-24netfilter: flowtable: use correct direction to set up tunnel routePablo Neira Ayuso1-3/+3
2026-07-24netfilter: xt_nat: reject unsupported target familiesWyatt Feng1-0/+9
2026-07-24netfilter: ecache: fix inverted time_after() checkYizhou Zhao1-1/+1
2026-07-24netfilter: xt_physdev: masks are not c-stringsFlorian Westphal1-5/+0
2026-07-24netfilter: nf_conncount: fix zone comparison in tuple dedupYizhou Zhao1-3/+3
2026-07-24netfilter: flowtable: support IPIP tunnel with direct xmitPablo Neira Ayuso2-6/+9
2026-07-24netfilter: flowtable: use dst in this direction when pushing IPIP headerPablo Neira Ayuso1-7/+11
2026-07-24netfilter: nf_nat_sip: reload possible stale data pointerFlorian Westphal1-0/+11
2026-07-24netfilter: nft_set_pipapo: don't leak bad clone into future transactionFlorian Westphal2-5/+37
2026-07-24netfilter: nf_conntrack_sip: validate skb_dst() before accessing itPablo Neira Ayuso1-2/+5
2026-07-24netfilter: nft_fib: reject fib expression on the netdev egress hookTheodor Arsenij Larionov-Trichkine2-1/+37
2026-07-24netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dstHaoze Xie2-0/+17
2026-07-24netfilter: xt_cluster: reject template conntracks in hash matchWyatt Feng1-1/+1
2026-07-24netfilter: nfnl_cthelper: apply per-class values when updating policiesDavid Carlier1-2/+2
2026-07-24netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readMuhammad Bilal1-3/+3
2026-07-24ipvs: ensure inner headers in ICMP errors are in headroomJulian Anastasov1-6/+15
2026-07-24ipvs: fix PMTU for GUE/GRE tunnel ICMP errorsYizhou Zhao1-3/+3
2026-07-24ipvs: use parsed transport offset in TCP state lookupYizhou Zhao1-7/+1
2026-07-24ipvs: pass parsed transport offset to state handlersYizhou Zhao4-8/+11
2026-07-24netfilter: nft_lookup: fix catchall element handling with inverted lookupsTamaki Yanagawa1-5/+5
2026-07-24netfilter: xt_connmark: reject invalid shift parametersWyatt Feng1-2/+12
2026-07-24netfilter: nft_set_rbtree: get command skips end element with open intervalPablo Neira Ayuso2-2/+9
2026-07-24netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()Feng Wu1-1/+1
2026-07-24netfilter: xt_u32: reject invalid shift countsWyatt Feng1-1/+11
2026-07-24netfilter: nf_conntrack_helper: cap maximum number of expectation at helper r...Pablo Neira Ayuso2-4/+8
2026-07-24netfilter: nft_ct: expectation timeouts are passed in millisecondsFlorian Westphal1-3/+18
2026-07-24netfilter: nf_conntrack_expect: run expectation eviction with no helperPablo Neira Ayuso1-0/+7
2026-07-24netfilter: nf_conntrack_expect: store master_tuple in expectationPablo Neira Ayuso3-6/+7
2026-07-24netfilter: nf_conntrack_expect: use conntrack GC to reap expectationsPablo Neira Ayuso7-105/+125
2026-07-24netfilter: conntrack: check NULL when retrieving ct extensionPablo Neira Ayuso11-23/+134
2026-07-24netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE trackerPablo Neira Ayuso2-61/+63
2026-07-24netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helperPablo Neira Ayuso12-171/+185
generated by cgit v1.2.3 (git 2.39.0) at 2026-08-17 14:08:38 +0300