summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2023-08-11treewide: Remove uninitialized_var() usageKees Cook1-3/+3
2023-05-30netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-9/+9
2022-10-26netfilter: nft_fib: Fix for rpath check with VRF devicesPhil Sutter1-0/+3
2022-01-27netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()Xin Xiong1-1/+4
2021-04-16netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2-0/+4
2021-03-30Revert "netfilter: x_tables: Update remaining dereference to RCU"Mark Tomlinson2-2/+2
2021-03-30Revert "netfilter: x_tables: Switch synchronization to RCU"Mark Tomlinson2-14/+14
2021-01-27netfilter: rpfilter: mask ecn bits before fib lookupGuillaume Nault1-1/+1
2021-01-12netfilter: x_tables: Update remaining dereference to RCUSubash Abhinov Kasiviswanathan2-2/+2
2020-12-30netfilter: x_tables: Switch synchronization to RCUSubash Abhinov Kasiviswanathan2-14/+14
2020-11-18netfilter: use actual socket sk rather than skb sk when routing harderJason A. Donenfeld5-5/+5
2020-10-29netfilter: nf_log: missing vlan offload tag and protoPablo Neira Ayuso2-4/+21
2020-06-03netfilter: nf_conntrack_pptp: prevent buffer overflows in debug codePablo Neira Ayuso1-5/+2
2020-01-23netfilter: arp_tables: init netns pointer in xt_tgdtor_param structFlorian Westphal1-9/+10
2020-01-14netfilter: arp_tables: init netns pointer in xt_tgchk_param structFlorian Westphal1-11/+16
2019-11-20netfilter: masquerade: don't flush all conntracks if only one address deleted...Tan Hu1-3/+19
2019-08-16netfilter: Fix rpfilter dropping vrf packets by mistakeMiaohe Lin1-0/+1
2019-03-23netfilter: ipt_CLUSTERIP: fix warning unused variable cnAnders Roxell1-1/+1
2019-02-27netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in clusterip_config_entry_p...Taehee Yoo1-5/+14
2019-02-23netfilter: nf_nat_snmp_basic: add missing length checks in ASN.1 cbsJann Horn1-1/+6
2019-01-26netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routineTaehee Yoo1-68/+87
2019-01-26netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routineTaehee Yoo1-1/+0
2019-01-26netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is setTaehee Yoo1-1/+2
2018-12-17netfilter: nat: fix double register in masquerade modulesTaehee Yoo1-7/+16
2018-12-17netfilter: add missing error handling code for register functionsTaehee Yoo3-7/+25
2018-08-31netfilter: kconfig: nat related expression depend on nftables coreFlorian Westphal1-3/+5
2018-07-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller4-880/+3
2018-07-21Merge ra.kernel.org:/pub/scm/linux/kernel/git/torvalds/linuxDavid S. Miller2-6/+13
2018-07-17netfilter: conntrack: remove l3proto abstractionFlorian Westphal4-781/+3
2018-07-16netfilter: conntrack: remove get_timeout() indirectionFlorian Westphal1-5/+11
2018-07-16netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackersFlorian Westphal1-30/+0
2018-07-16netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackersFlorian Westphal2-12/+1
2018-07-16netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackersFlorian Westphal1-17/+0
2018-07-16netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackersFlorian Westphal1-47/+0
2018-07-06netfilter: nf_tproxy: fix possible non-linear access to transport headerMáté Eckl1-6/+12
2018-07-05netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal1-0/+1
2018-06-28netfilter: check if the socket netns is correct.Flavio Leitner1-4/+4
2018-06-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-0/+1
2018-06-08netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+1
2018-06-03netfilter: Libify xt_TPROXYMáté Eckl3-1/+152
2018-05-29netfilter: nat: merge ipv4/ipv6 masquerade code into main nat moduleFlorian Westphal3-11/+2
2018-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller4-162/+115
2018-05-23netfilter: nf_nat: add nat type hooks to nat coreFlorian Westphal3-112/+106
2018-05-23netfilter: nf_tables: allow chain type to override hook registerFlorian Westphal1-6/+13
2018-05-23netfilter: xtables: allow table definitions not backed by hook_opsFlorian Westphal1-1/+4
2018-05-23netfilter: nf_nat: move common nat code to nat coreFlorian Westphal1-53/+2
2018-05-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-1/+2
2018-05-17net/ipv4: Initialize proto and ports in flow structDavid Ahern1-1/+1
2018-05-08netfilter: x_tables: add module alias for icmp matchesFlorian Westphal1-0/+1
2018-05-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller12-279/+20