summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2020-02-28netfilter: xt_hashlimit: limit the max size of hashtableCong Wang1-0/+10
2020-02-24netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policyXin Long1-1/+2
2020-02-11netfilter: ipset: fix suspicious RCU usage in find_set_and_idKadlecsik József1-20/+21
2020-02-06netfilter: nf_tables_offload: fix check the chain offload flagwenxu1-1/+1
2020-02-06netfilter: conntrack: sctp: use distinct states for new SCTP connectionsJiri Wiesner1-3/+3
2020-01-29netfilter: nf_tables: autoload modules from the abort pathPablo Neira Ayuso2-43/+89
2020-01-29netfilter: nf_tables: add __nft_chain_type_get()Pablo Neira Ayuso1-8/+21
2020-01-29netfilter: ipset: use bitmap infrastructure completelyKadlecsik József4-10/+10
2020-01-29netfilter: nft_osf: add missing check for DREG attributeFlorian Westphal1-0/+3
2020-01-23netfilter: nf_tables: fix flowtable list del corruptionFlorian Westphal1-0/+6
2020-01-23netfilter: nf_tables: store transaction list locally while requesting modulePablo Neira Ayuso1-9/+10
2020-01-23netfilter: nf_tables: remove WARN and add NLA_STRING upper limitsFlorian Westphal1-4/+9
2020-01-23netfilter: nft_tunnel: ERSPAN_VERSION must not be nullFlorian Westphal1-0/+3
2020-01-23netfilter: nft_tunnel: fix null-attribute checkFlorian Westphal1-1/+1
2020-01-23netfilter: nat: fix ICMP header corruption on ICMP errorsEyal Birger1-0/+13
2020-01-23netfilter: fix a use-after-free in mtype_destroy()Cong Wang1-1/+1
2020-01-17netfilter: nft_meta: use 64-bit time arithmeticArnd Bergmann1-5/+5
2020-01-17netfilter: nf_tables_offload: release flow_rule on error from commit pathPablo Neira Ayuso1-5/+21
2020-01-17netfilter: nft_flow_offload: fix underflow in flowtable reference counterwenxu1-3/+0
2020-01-14netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is presentFlorian Westphal1-1/+2
2020-01-14netfilter: conntrack: dccp, sctp: handle null timeout argumentFlorian Westphal2-0/+6
2020-01-12netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no actionsPablo Neira Ayuso1-0/+3
2020-01-12netfilter: nf_tables: skip module reference count bump on object updatesPablo Neira Ayuso1-1/+1
2020-01-12netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()Pablo Neira Ayuso4-3/+21
2020-01-12netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_ENDPablo Neira Ayuso1-3/+9
2020-01-12netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named ...Pablo Neira Ayuso1-5/+16
2020-01-12netfilter: nf_tables_offload: Check for the NETDEV_UNREGISTER eventwenxu1-0/+3
2020-01-12netfilter: ctnetlink: netns exit must wait for callbacksFlorian Westphal1-0/+3
2020-01-09netfilter: nf_queue: enqueue skbs with NULL dstMarco Oliverio1-1/+1
2020-01-09netfilter: nft_tproxy: Fix port selector on Big EndianPhil Sutter1-2/+2
2020-01-04net: add bool confirm_neigh parameter for dst_ops.update_pmtuHangbin Liu1-1/+1
2019-12-18net: core: rename indirect block ingress cb functionJohn Hurley1-3/+3
2019-11-04Merge branch 'master' of git://blackhole.kfki.hu/nfPablo Neira Ayuso4-17/+36
2019-11-04netfilter: nf_tables_offload: skip EBUSY on chain updatePablo Neira Ayuso1-1/+2
2019-11-04netfilter: nf_tables: bogus EOPNOTSUPP on basechain updatePablo Neira Ayuso1-0/+1
2019-11-04netfilter: nf_tables: fix unexpected EOPNOTSUPP errorFernando Fernandez Mancera1-4/+2
2019-11-04netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICTJozsef Kadlecsik3-13/+30
2019-11-04netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 setsStefano Brivio1-1/+1
2019-11-04netfilter: ipset: Fix an error code in ip_set_sockfn_get()Dan Carpenter1-3/+5
2019-11-04netfilter: nf_tables_offload: check for register data length mismatchesPablo Neira Ayuso2-3/+4
2019-10-26Merge tag 'ipvs-fixes-for-v5.4' of https://git.kernel.org/pub/scm/linux/kerne...Pablo Neira Ayuso5-25/+35
2019-10-24netfilter: nft_payload: fix missing check for matching length in offloadswenxu1-0/+38
2019-10-24ipvs: move old_secure_tcp into struct netns_ipvsEric Dumazet1-8/+7
2019-10-24ipvs: don't ignore errors in case refcounting ip_vs module failsDavide Caratti5-17/+28
2019-10-23netfilter: nf_tables_offload: restore basechain deletionPablo Neira Ayuso1-1/+1
2019-10-23netfilter: nf_flow_table: set timeout before insertion into hashesPablo Neira Ayuso1-1/+2
2019-10-10netfilter: conntrack: avoid possible false sharingEric Dumazet1-2/+2
2019-10-01netfilter: nft_connlimit: disable bh on garbage collectionPablo Neira Ayuso1-1/+6
2019-10-01netfilter: drop bridge nf reset from nf_resetFlorian Westphal1-1/+1
2019-09-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller4-7/+42