summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2021-06-02netfilter: fix clang-12 fmt string warningsFlorian Westphal2-2/+2
2021-06-02netfilter: nft_set_pipapo_avx2: fix up description warningsFlorian Westphal1-2/+1
2021-05-29netfilter: nf_tables: remove xt_action_param from nft_pktinfoFlorian Westphal1-10/+18
2021-05-29netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec()Florian Westphal3-17/+17
2021-05-29netfilter: nf_tables: add and use nft_thoff helperFlorian Westphal7-18/+18
2021-05-29netfilter: nf_tables: add and use nft_sk helperFlorian Westphal1-2/+2
2021-05-29netfilter: use nfnetlink_unicast()Pablo Neira Ayuso5-124/+44
2021-05-29netfilter: xt_CT: Remove redundant assignment to retYang Li1-1/+0
2021-05-29netfilter: x_tables: improve limit_mt scalabilityJason Baron1-20/+26
2021-05-29netfilter: Remove leading spaces in KconfigJuerg Haefliger2-2/+2
2021-05-29netfilter: nf_tables: prefer direct calls for set lookupsFlorian Westphal6-15/+47
2021-05-28netfilter: add and use nft_set_do_lookup helperFlorian Westphal2-4/+4
2021-05-28netfilter: nft_set_pipapo_avx2: Skip LDMXCSR, we don't need a valid MXCSR stateStefano Brivio1-2/+7
2021-05-28netfilter: nft_exthdr: Support SCTP chunksPhil Sutter1-0/+51
2021-05-14netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-A...Stefano Brivio3-2/+7
2021-05-14netfilter: flowtable: Remove redundant hw refresh bitRoi Dayan2-5/+5
2021-05-07netfilter: nftables: avoid potential overflows on 32bit archesEric Dumazet2-7/+10
2021-05-07netfilter: nftables: avoid overflows in nft_hash_buckets()Eric Dumazet1-1/+9
2021-05-06netfilter: nftables: Fix a memleak from userdata error path in new objectsPablo Neira Ayuso1-2/+2
2021-05-06netfilter: remove BUG_ON() after skb_header_pointer()Pablo Neira Ayuso6-7/+21
2021-05-05netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL checkPablo Neira Ayuso1-0/+2
2021-05-05netfilter: nfnetlink: add a missing rcu_read_unlock()Eric Dumazet1-0/+1
2021-05-04netfilter: xt_SECMARK: add new revision to fix structure layoutPablo Neira Ayuso1-19/+69
2021-04-27netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=nArnd Bergmann1-2/+2
2021-04-27netfilter: nft_socket: fix an unused variable warningArnd Bergmann1-2/+5
2021-04-27netfilter: nftables: add catch-all set element supportPablo Neira Ayuso6-63/+458
2021-04-27netfilter: nftables: add helper function to validate set element dataPablo Neira Ayuso1-4/+11
2021-04-27netfilter: nftables: add helper function to flush set elementsPablo Neira Ayuso1-13/+18
2021-04-27netfilter: nftables: add loop check helper functionPablo Neira Ayuso1-9/+21
2021-04-27netfilter: nftables: rename set element data activation/deactivation functionsPablo Neira Ayuso1-11/+11
2021-04-26netfilter: allow to turn off xtables compat layerFlorian Westphal3-11/+21
2021-04-26netfilter: nfnetlink: consolidate callback typesPablo Neira Ayuso11-118/+261
2021-04-26netfilter: nfnetlink: pass struct nfnl_info to batch callbacksPablo Neira Ayuso2-172/+180
2021-04-26netfilter: nfnetlink: pass struct nfnl_info to rcu callbacksPablo Neira Ayuso4-116/+105
2021-04-26netfilter: nfnetlink: add struct nfnl_info and pass it to callbacksPablo Neira Ayuso9-336/+277
2021-04-26netfilter: nftables: add nft_pernet() helper functionPablo Neira Ayuso4-71/+61
2021-04-26netfilter: nf_log_syslog: Unset bridge logger in pernet exitPhil Sutter1-0/+1
2021-04-26netfilter: ip_tables: pass table pointer via nf_hook_opsFlorian Westphal1-0/+1
2021-04-26netfilter: x_tables: add xt_find_tableFlorian Westphal1-0/+17
2021-04-26netfilter: disable defrag once its no longer neededFlorian Westphal4-2/+57
2021-04-26netfilter: nft_socket: add support for cgroupsv2Pablo Neira Ayuso1-1/+47
2021-04-26netfilter: nat: move nf_xfrm_me_harder to where it is usedFlorian Westphal2-37/+38
2021-04-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller13-88/+329
2021-04-18netfilter: nftables: counter hardware offload supportPablo Neira Ayuso3-7/+69
2021-04-18netfilter: nftables_offload: special ethertype handling for VLANPablo Neira Ayuso1-0/+44
2021-04-18netfilter: nftables_offload: VLAN id needs host byteorder in flow dissectorPablo Neira Ayuso2-6/+45
2021-04-18netfilter: nft_payload: fix C-VLAN offload supportPablo Neira Ayuso1-2/+3
2021-04-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-25/+42
2021-04-13netfilter: flowtable: Add FLOW_OFFLOAD_XMIT_UNSPEC xmit typeRoi Dayan1-0/+3
2021-04-13netfilter: conntrack: convert sysctls to u8Florian Westphal2-41/+35