summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2021-07-06netfilter: nft_last: incorrect arithmetics when restoring last usedPablo Neira Ayuso1-1/+1
2021-07-06netfilter: nft_last: honor NFTA_LAST_SET on restorationPablo Neira Ayuso1-2/+8
2021-07-06netfilter: conntrack: Mark access for KCSANManfred Spraul1-1/+9
2021-07-06netfilter: conntrack: add new sysctl to disable RST checkAli Abdallah2-1/+15
2021-07-06netfilter: conntrack: improve RST handling when tuple is re-usedAli Abdallah1-17/+36
2021-07-02netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin1-0/+3
2021-07-02netfilter: conntrack: nf_ct_gre_keymap_flush() removalVasily Averin3-21/+0
2021-07-02netfilter: nf_tables: Fix dereference of null pointer flowColin Ian King1-1/+2
2021-07-02netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT stateFlorian Westphal1-0/+10
2021-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-52/+64
2021-06-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller12-40/+132
2021-06-22netfilter: nf_tables: do not allow to delete table with owner by handlePablo Neira Ayuso1-3/+9
2021-06-22netfilter: nf_tables: skip netlink portID validation if zeroPablo Neira Ayuso1-1/+1
2021-06-21netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer...Pablo Neira Ayuso1-10/+7
2021-06-21netfilter: nf_tables: memleak in hw offload abort pathPablo Neira Ayuso2-37/+31
2021-06-21netfilter: nfnetlink_hook: fix check for snprintf() overflowDan Carpenter1-1/+3
2021-06-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-42/+48
2021-06-18netfilter: conntrack: pass hook state to log functionsFlorian Westphal7-36/+35
2021-06-17netfilter: nf_tables: add last expressionPablo Neira Ayuso3-1/+89
2021-06-16netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter1-1/+1
2021-06-16netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter1-1/+4
2021-06-16netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso1-1/+8
2021-06-16netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso1-0/+5
2021-06-16netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso1-0/+3
2021-06-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-42/+43
2021-06-11netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy1-0/+5
2021-06-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller20-203/+615
2021-06-09netfilter: nf_tables: move base hook annotation to init helperFlorian Westphal1-8/+7
2021-06-09netfilter: nfnetlink_hook: add depends-on nftablesFlorian Westphal1-0/+1
2021-06-09netfilter: nfnetlink_hook: fix array index out-of-bounds errorColin Ian King1-1/+1
2021-06-09netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso1-42/+43
2021-06-09netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter1-1/+3
2021-06-07Merge ra.kernel.org:/pub/scm/linux/kernel/git/netdev/netDavid S. Miller5-32/+66
2021-06-07netfilter: add new hook nfnl subsystemFlorian Westphal4-0/+386
2021-06-07netfilter: annotate nf_tables base hook opsFlorian Westphal1-1/+3
2021-06-07netfilter: flowtable: Set offload timeouts according to proto valuesOz Shlomo2-12/+39
2021-06-07netfilter: conntrack: Introduce udp offload timeout configurationOz Shlomo2-0/+27
2021-06-07netfilter: conntrack: Introduce tcp offload timeout configurationOz Shlomo2-0/+29
2021-06-07netfilter: nftables: add nf_ct_pernet() helper functionPablo Neira Ayuso6-38/+24
2021-06-07netfilter: nf_tables: remove nft_ctx_init_from_setattr()Pablo Neira Ayuso1-39/+25
2021-06-07netfilter: nf_tables: remove nft_ctx_init_from_elemattr()Pablo Neira Ayuso1-38/+34
2021-06-07netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use itPablo Neira Ayuso6-70/+41
2021-06-02netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatchesPablo Neira Ayuso1-2/+6
2021-06-02netfilter: nft_ct: skip expectations for confirmed conntrackPablo Neira Ayuso1-1/+1
2021-06-02netfilter: fix clang-12 fmt string warningsFlorian Westphal2-2/+2
2021-06-02netfilter: nft_set_pipapo_avx2: fix up description warningsFlorian Westphal1-2/+1
2021-05-29netfilter: nf_tables: remove xt_action_param from nft_pktinfoFlorian Westphal1-10/+18
2021-05-29netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec()Florian Westphal3-17/+17
2021-05-29netfilter: nf_tables: add and use nft_thoff helperFlorian Westphal7-18/+18
2021-05-29netfilter: nf_tables: add and use nft_sk helperFlorian Westphal1-2/+2