summaryrefslogtreecommitdiff
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2022-08-31netfilter: nf_tables: disallow jump to implicit chain from set elementPablo Neira Ayuso1-0/+5
2022-08-31netfilter: nf_tables: upfront validation of data via nft_data_init()Pablo Neira Ayuso1-2/+2
2022-08-31netfilter: nft_cmp: optimize comparison for 16-bytesPablo Neira Ayuso1-0/+9
2022-06-29netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso4-9/+9
2022-06-29netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso3-5/+5
2022-06-14netfilter: nf_tables: bail out early if hardware offload is not supportedPablo Neira Ayuso1-1/+1
2022-06-14netfilter: nf_tables: delete flowtable hooks via transaction listPablo Neira Ayuso1-1/+0
2022-06-06netfilter: conntrack: re-fetch conntrack after insertionFlorian Westphal1-1/+6
2022-03-08netfilter: nf_queue: fix possible use-after-freeFlorian Westphal1-1/+1
2022-03-02netfilter: nf_tables_offload: incorrect flow offload action array sizePablo Neira Ayuso2-3/+1
2021-12-14netfilter: conntrack: annotate data-races around ct->timeoutEric Dumazet1-3/+3
2021-06-03netfilter: flowtable: Remove redundant hw refresh bitRoi Dayan1-1/+0
2021-05-14netfilter: nftables_offload: VLAN id needs host byteorder in flow dissectorPablo Neira Ayuso1-1/+10
2021-05-14netfilter: nft_payload: fix C-VLAN offload supportPablo Neira Ayuso1-0/+1
2021-03-30netfilter: nftables: allow to update flowtable flagsPablo Neira Ayuso1-0/+3
2020-12-08netfilter: nft_dynset: fix timeouts later than 23 daysPablo Neira Ayuso1-0/+4
2020-11-27netfilter: nftables_offload: build mask based from the matching bytesPablo Neira Ayuso1-0/+3
2020-11-27netfilter: nftables_offload: set address type in control dissectorPablo Neira Ayuso1-0/+4
2020-10-20netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_c...Saeed Mirzamohammadi1-0/+6
2020-10-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+1
2020-10-15netfilter: restore NF_INET_NUMHOOKSPablo Neira Ayuso1-1/+3
2020-10-14netfilter: nf_log: missing vlan offload tag and protoPablo Neira Ayuso1-0/+1
2020-10-12netfilter: nf_tables: add inet ingress supportPablo Neira Ayuso3-0/+85
2020-10-04netfilter: nf_tables: Implement fast bitwise expressionPhil Sutter1-0/+9
2020-10-04netfilter: nf_tables: Enable fast nft_cmp for inverted matchesPhil Sutter1-0/+2
2020-09-30netfilter: nf_tables: add userdata attributes to nft_chainJose M. Guisado Gomez1-0/+2
2020-09-22netfilter: nf_tables: Remove ununsed function nft_data_debugYueHaibing1-7/+0
2020-09-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-0/+4
2020-09-08netfilter: nf_tables: add userdata support for nft_objectJose M. Guisado Gomez1-0/+2
2020-08-28netfilter: nf_tables: add userdata attributes to nft_tableJose M. Guisado Gomez1-0/+2
2020-08-21netfilter: nf_tables: fix destination register zeroingFlorian Westphal1-0/+2
2020-08-11Merge tag 'locking-urgent-2020-08-10' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds1-1/+1
2020-08-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2-0/+14
2020-08-03netfilter: conntrack: Move nf_ct_offload_timeout to header fileRoi Dayan1-0/+12
2020-07-31netfilter: nft_compat: make sure xtables destructors have runFlorian Westphal1-0/+2
2020-07-29netfilter: conntrack: Use sequence counter with associated spinlockAhmed S. Darwish1-1/+1
2020-07-04netfilter: nf_tables: add NFT_CHAIN_BINDINGPablo Neira Ayuso1-1/+12
2020-07-04netfilter: nf_tables: expose enum nft_chain_flags through UAPIPablo Neira Ayuso1-6/+1
2020-07-04netfilter: nf_tables: add NFTA_CHAIN_ID attributePablo Neira Ayuso1-0/+3
2020-06-16netfilter: flowtable: Make nf_flow_table_offload_add/del_cb inlineAlaa Hleihel1-4/+45
2020-06-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-2/+11
2020-06-01netfilter: nf_flowtable: expose nf_flow_table_gc_cleanup()Pablo Neira Ayuso1-0/+2
2020-05-27netfilter: nf_tables: delete devices from flowtablePablo Neira Ayuso1-0/+1
2020-05-27netfilter: nf_tables: add devices to existing flowtablePablo Neira Ayuso1-0/+6
2020-05-27netfilter: ctnetlink: add kernel side filtering for dumpRomain Bellan1-2/+4
2020-05-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller2-1/+2
2020-05-11netfilter: flowtable: Add pending bit for offload workPaul Blakey1-0/+1
2020-05-11netfilter: conntrack: avoid gcc-10 zero-length-bounds warningArnd Bergmann1-1/+1
2020-04-27netfilter: nf_tables: allow up to 64 bytes in the set element data areaPablo Neira Ayuso1-0/+4
2020-04-06netfilter: nf_tables: do not update stateful expressions if lookup is invertedPablo Neira Ayuso1-1/+1