summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2022-03-20netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned()Phil Sutter2-0/+9
2022-03-20netfilter: conntrack: revisit gc autotuningFlorian Westphal1-17/+68
2022-03-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-45/+10
2022-03-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski6-22/+116
2022-03-12netfilter: nf_tables: disable register trackingPablo Neira Ayuso1-2/+7
2022-03-08Revert "netfilter: conntrack: tag conntracks picked up in local out hook"Florian Westphal1-3/+0
2022-03-08Revert "netfilter: nat: force port remap to prevent shadowing well-known ports"Florian Westphal1-40/+3
2022-03-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-13/+50
2022-03-03net: Get rcv tstamp if needed in nfnetlink_{log, queue}.cMartin KaFai Lau2-5/+9
2022-03-03net: Add skb_clear_tstamp() to keep the mono delivery_timeMartin KaFai Lau4-7/+7
2022-03-03netfilter: flowtable: Support GREToshiaki Makita4-19/+88
2022-03-03netfilter: nf_tables: Reject tables of unsupported familyPhil Sutter1-0/+27
2022-03-03Revert "netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY"Florian Westphal1-3/+1
2022-03-02net/sched: act_ct: Fix flow table lookup failure with no originating ifindexPaul Blakey1-1/+5
2022-03-01netfilter: nf_queue: handle socket prefetchFlorian Westphal1-0/+12
2022-03-01netfilter: nf_queue: fix possible use-after-freeFlorian Westphal2-7/+18
2022-03-01netfilter: nf_queue: don't assume sk is full socketFlorian Westphal1-1/+10
2022-03-01netfilter: fix use-after-free in __nf_register_net_hook()Eric Dumazet1-2/+3
2022-02-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski7-6/+57
2022-02-23netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variantEric Dumazet1-2/+2
2022-02-22netfilter: nf_tables: fix memory leak during stateful obj updateFlorian Westphal1-4/+9
2022-02-21netfilter: nft_limit: fix stateful object memory leakFlorian Westphal1-0/+18
2022-02-21netfilter: nf_tables: unregister flowtable hooks on netns exitPablo Neira Ayuso1-0/+3
2022-02-20netfilter: nf_tables_offload: incorrect flow offload action array sizePablo Neira Ayuso4-2/+25
2022-02-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-2/+4
2022-02-14netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependencyPablo Neira Ayuso1-0/+2
2022-02-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-24/+58
2022-02-10netfilter: nft_synproxy: unregister hooks on init error pathPablo Neira Ayuso1-1/+3
2022-02-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski20-411/+403
2022-02-09netfilter: ctnetlink: use dump structure instead of raw argsFlorian Westphal1-12/+24
2022-02-09nfqueue: enable to set skb->priorityNicolas Dichtel1-0/+8
2022-02-09netfilter: nft_cmp: optimize comparison for 16-bytesPablo Neira Ayuso2-2/+116
2022-02-09netfilter: cttimeout: use option structureFlorian Westphal2-22/+20
2022-02-09netfilter: ecache: don't use nf_conn spinlockFlorian Westphal1-12/+13
2022-02-09netfilter: xt_socket: fix a typo in socket_mt_destroy()Eric Dumazet1-1/+1
2022-02-07net: netfilter: use kfree_drop_reason() for NF_DROPMenglong Dong1-1/+2
2022-02-04netfilter: nft_compat: suppress comment matchFlorian Westphal1-0/+9
2022-02-04netfilter: exthdr: add support for tcp option removalFlorian Westphal1-1/+95
2022-02-04netfilter: conntrack: pptp: use single option structureFlorian Westphal1-42/+18
2022-02-04netfilter: conntrack: remove extension register apiFlorian Westphal11-227/+7
2022-02-04netfilter: conntrack: handle ->destroy hook via nat_ops insteadFlorian Westphal3-33/+15
2022-02-04netfilter: conntrack: move extension sizes into coreFlorian Westphal11-56/+76
2022-02-04netfilter: conntrack: make all extensions 8-byte alignnedFlorian Westphal10-10/+1
2022-02-04netfilter: nfqueue: enable to get skb->priorityNicolas Dichtel1-0/+5
2022-02-04netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARYKevin Mitchell1-1/+3
2022-02-04netfilter: ctnetlink: disable helper autoassignFlorian Westphal1-1/+2
2022-02-04netfilter: conntrack: re-init state for retransmitted syn-ackFlorian Westphal1-0/+12
2022-02-04netfilter: conntrack: move synack init code to helperFlorian Westphal1-18/+29
2022-02-04netfilter: nft_payload: don't allow th access for fragmentsFlorian Westphal2-5/+6
2022-02-04netfilter: conntrack: don't refresh sctp entries in closed stateFlorian Westphal1-0/+9