summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2023-03-08netfilter: nft_redir: correct value of inet type `.maxattrs`Jeremy Sowden1-1/+1
2023-03-08netfilter: nft_redir: correct length for loading protocol registersJeremy Sowden1-1/+1
2023-03-08netfilter: nft_masq: correct length for loading protocol registersJeremy Sowden1-1/+1
2023-03-08netfilter: nft_nat: correct length for loading protocol registersJeremy Sowden1-1/+1
2023-03-07netfilter: conntrack: adopt safer max chain lengthEric Dumazet1-2/+2
2023-03-06netfilter: ctnetlink: revert to dumping mark regardless of event typeIvan Delalande1-7/+7
2023-03-01netfilter: nft_quota: copy content when cloning expressionPablo Neira Ayuso1-1/+5
2023-03-01netfilter: nft_last: copy content when cloning expressionPablo Neira Ayuso1-0/+4
2023-02-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski8-23/+30
2023-02-22netfilter: ctnetlink: make event listener tracking globalFlorian Westphal3-5/+9
2023-02-22netfilter: xt_length: use skb len to match in length_mt6Xin Long1-2/+1
2023-02-22netfilter: conntrack: fix rmmod double-free raceFlorian Westphal3-14/+15
2023-02-22netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()Hangyu Hua1-1/+4
2023-02-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller7-11/+73
2023-02-17netfilter: let reset rules clean out conntrack entriesFlorian Westphal3-0/+63
2023-02-11Daniel Borkmann says:Jakub Kicinski2-13/+13
2023-02-11net: extract nf_ct_handle_fragments to nf_conntrack_ovsXin Long1-0/+48
2023-02-11net: extract nf_ct_skb_network_trim function to nf_conntrack_ovsXin Long1-0/+26
2023-02-11net: create nf_conntrack_ovs for ovs and tc useXin Long4-98/+108
2023-02-09netfilter: nf_tables: allow to fetch set elements when table has an ownerPablo Neira Ayuso1-1/+1
2023-02-03netfilter: nf_conntrack: allow early drop of offloaded UDP connsVlad Buslov1-5/+6
2023-02-03netfilter: flowtable: cache info of last offloadVlad Buslov2-4/+4
2023-02-03netfilter: flowtable: allow unidirectional rulesVlad Buslov1-4/+8
2023-02-03netfilter: flowtable: fixup UDP timeout depending on ct stateVlad Buslov1-1/+4
2023-02-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+3
2023-02-02ipvs: avoid kfree_rcu without 2nd argJulian Anastasov1-1/+1
2023-02-02netfilter: use skb_ip_totlen and iph_totlenXin Long3-3/+3
2023-02-02bpf: Add __bpf_kfunc tag to all kfuncsDavid Vernet2-13/+13
2023-02-01netfilter: conntrack: remote a return value of the 'seq_print_acct' function.Gavrilov Ilia1-8/+4
2023-02-01netfilter: conntrack: udp: fix seen-reply testFlorian Westphal1-1/+1
2023-02-01netfilter: nf_tables: fix wrong pointer passed to PTR_ERR()Yang Yingliang1-1/+1
2023-02-01netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()Alok Tiwari1-0/+3
2023-01-31Revert "netfilter: conntrack: fix bug in for_each_sctp_chunk"Florian Westphal1-2/+3
2023-01-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-242/+278
2023-01-26net: Kconfig: fix spellosRandy Dunlap1-1/+1
2023-01-25netlink: fix spelling mistake in dump size assertJakub Kicinski1-1/+1
2023-01-24netfilter: conntrack: unify established states for SCTP pathsSriram Yagnaraman2-62/+39
2023-01-24Revert "netfilter: conntrack: add sctp DATA_SENT state"Sriram Yagnaraman2-68/+42
2023-01-24netfilter: conntrack: fix bug in for_each_sctp_chunkSriram Yagnaraman1-2/+2
2023-01-24netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETESriram Yagnaraman1-9/+16
2023-01-23netfilter: nft_set_rbtree: skip elements in transaction from garbage collectionPablo Neira Ayuso1-1/+15
2023-01-23netfilter: nft_set_rbtree: Switch to node list walk for overlap detectionPablo Neira Ayuso1-127/+189
2023-01-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-3/+18
2023-01-18netfilter: nf_tables: add support to destroy operationFernando Fernandez Mancera1-8/+103
2023-01-18netfilter: nf_tables: avoid retpoline overhead for some ct expression callsFlorian Westphal4-12/+92
2023-01-18netfilter: nf_tables: avoid retpoline overhead for objref callsFlorian Westphal2-6/+8
2023-01-18netfilter: nf_tables: add static key to skip retpoline workaroundsFlorian Westphal1-1/+29
2023-01-18netfilter: conntrack: move rcu read lock to nf_conntrack_find_getFlorian Westphal1-8/+9
2023-01-18netfilter: conntrack: avoid reload of ct->statusFlorian Westphal2-8/+11
2023-01-18netfilter: conntrack: remove pr_debug callsFlorian Westphal3-44/+5