summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2020-03-25net: Fix CONFIG_NET_CLS_ACT=n and CONFIG_NFT_FWD_NETDEV={y, m} buildPablo Neira Ayuso-3/+2
2020-03-24netfilter: nft_fwd_netdev: allow to redirect to ifb via ingressPablo Neira Ayuso-0/+4
2020-03-24netfilter: nft_fwd_netdev: validate family and chain typePablo Neira Ayuso-0/+9
2020-03-24netfilter: nft_set_rbtree: Detect partial overlaps on insertionStefano Brivio-3/+67
2020-03-24netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()Stefano Brivio-6/+11
2020-03-24netfilter: nft_set_pipapo: Separate partial and complete overlap cases on ins...Stefano Brivio-7/+27
2020-03-24netfilter: nf_tables: Allow set back-ends to report partial overlaps on inser...Pablo Neira Ayuso-0/+5
2020-03-19netfilter: flowtable: populate addr_type maskEdward Cree-0/+1
2020-03-19netfilter: flowtable: Fix flushing of offloaded flows on freePaul Blakey-0/+3
2020-03-19netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}Haishuang Yan-0/+2
2020-03-19netfilter: flowtable: reload ip{v6}h in nf_flow_nat_ip{v6}Haishuang Yan-4/+8
2020-03-06netfilter: nft_chain_nat: inet family is missing module ownershipPablo Neira Ayuso-0/+1
2020-03-05netfilter: nf_tables: fix infinite loop when expr is not availableFlorian Westphal-7/+3
2020-03-05netfilter: nf_tables: dump NFTA_CHAIN_FLAGS attributePablo Neira Ayuso-0/+5
2020-03-04netfilter: nft_tunnel: add missing attribute validation for tunnelsJakub Kicinski-0/+2
2020-03-04netfilter: nft_payload: add missing attribute validation for payload csum flagsJakub Kicinski-0/+1
2020-03-04netfilter: cthelper: add missing attribute validation for cthelperJakub Kicinski-0/+2
2020-03-04netfilter: nf_tables: free flowtable hooks on hook register errorFlorian Westphal-1/+6
2020-03-04netfilter: x_tables: xt_mttg_seq_next should increase position indexVasily Averin-3/+3
2020-03-04netfilter: xt_recent: recent_seq_next should increase position indexVasily Averin-1/+1
2020-03-04netfilter: synproxy: synproxy_cpu_seq_next should increase position indexVasily Averin-1/+1
2020-03-04netfilter: nf_conntrack: ct_cpu_seq_next should increase position indexVasily Averin-1/+1
2020-02-26netfilter: xt_hashlimit: unregister proc file before releasing mutexCong Wang-10/+6
2020-02-26nft_set_pipapo: Actually fetch key data in nft_pipapo_remove()Stefano Brivio-2/+4
2020-02-26Merge branch 'master' of git://blackhole.kfki.hu/nfPablo Neira Ayuso-205/+464
2020-02-22netfilter: ipset: Fix forceadd evaluation pathJozsef Kadlecsik-0/+2
2020-02-22netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reportsJozsef Kadlecsik-205/+462
2020-02-18netfilter: nft_set_pipapo: Don't abuse unlikely() in pipapo_refill()Stefano Brivio-1/+1
2020-02-18netfilter: nft_set_pipapo: Fix mapping table example in commentsStefano Brivio-2/+2
2020-02-17netfilter: conntrack: allow insertion of clashing entriesFlorian Westphal-6/+90
2020-02-11netfilter: conntrack: split resolve_clash functionFlorian Westphal-17/+41
2020-02-11netfilter: conntrack: place confirm-bit setting in a helperFlorian Westphal-7/+14
2020-02-11netfilter: conntrack: remove two args from resolve_clashFlorian Westphal-18/+51
2020-02-07netfilter: flowtable: skip offload setup if disabledFlorian Westphal-3/+3
2020-02-07netfilter: xt_hashlimit: limit the max size of hashtableCong Wang-0/+10
2020-02-07netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put()Cong Wang-6/+6
2020-02-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netLinus Torvalds-25/+27
2020-02-04proc: convert everything to "struct proc_ops"Alexey Dobriyan-9/+8
2020-01-31netfilter: flowtable: Fix setting forgotten NF_FLOW_HW_DEAD flagPaul Blakey-0/+1
2020-01-31netfilter: flowtable: Fix missing flush hardware on table freePaul Blakey-0/+1
2020-01-31netfilter: flowtable: Fix hardware flush order on nf_flow_table_cleanupPaul Blakey-1/+1
2020-01-31netfilter: Use kvcallocJoe Perches-4/+3
2020-01-29netfilter: ipset: fix suspicious RCU usage in find_set_and_idKadlecsik József-20/+21
2020-01-27nf_tables: Add set type for arbitrary concatenation of rangesStefano Brivio-1/+2106
2020-01-27netfilter: nf_tables: Support for sets with multiple ranged fieldsStefano Brivio-1/+92
2020-01-27netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attributePablo Neira Ayuso-23/+64
2020-01-27netfilter: nf_tables: add nft_setelem_parse_key()Pablo Neira Ayuso-46/+45
2020-01-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller-66/+128
2020-01-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller-65/+127
2020-01-24netfilter: nf_tables: autoload modules from the abort pathPablo Neira Ayuso-43/+89