summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2024-09-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-2/+2
2024-09-15netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtre...Dan Carpenter-2/+2
2024-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-7/+49
2024-09-12net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_...Lorenzo Bianconi-1/+7
2024-09-12netfilter: nft_socket: make cgroupsv2 matching work with namespacesFlorian Westphal-3/+38
2024-09-12netfilter: nft_socket: fix sk refcount leaksFlorian Westphal-3/+4
2024-09-09netfilter: nft_flow_offload: Unmask upper DSCP bits in nft_flow_route()Ido Schimmel-1/+2
2024-09-06Merge tag 'nf-next-24-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski-148/+165
2024-09-06net/netfilter: make use of the helper macro LIST_HEAD()Hongbo Li-3/+1
2024-09-03netfilter: nf_tables: set element timeout update supportPablo Neira Ayuso-5/+44
2024-09-03netfilter: nf_tables: zero timeout means element never times outPablo Neira Ayuso-17/+25
2024-09-03netfilter: nf_tables: consolidate timeout extension for elementsPablo Neira Ayuso-34/+22
2024-09-03netfilter: nf_tables: annotate data-races around element expirationPablo Neira Ayuso-2/+2
2024-09-03netfilter: nft_dynset: annotate data-races around set timeoutPablo Neira Ayuso-3/+3
2024-09-03netfilter: nf_tables: remove annotation to access set timeout while holding lockPablo Neira Ayuso-2/+2
2024-09-03netfilter: nf_tables: reject expiration higher than timeoutPablo Neira Ayuso-0/+3
2024-09-03netfilter: nf_tables: reject element expiration with no timeoutPablo Neira Ayuso-0/+3
2024-09-03netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso-1/+1
2024-09-03netfilter: nf_tables: drop unused 3rd argument from validate callback opsFlorian Westphal-46/+23
2024-09-03netfilter: conntrack: Convert to use ERR_CAST()Shen Lichuan-1/+1
2024-09-03netfilter: Use kmemdup_array instead of kmemdup for multiple allocationYan Zhen-1/+1
2024-09-03netfilter: nft_counter: Use u64_stats_t for statistic.Sebastian Andrzej Siewior-44/+46
2024-09-03netfilter: ctnetlink: support CTA_FILTER for flushChangliang Wu-6/+3
2024-08-26Merge tag 'nf-next-24-08-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski-70/+125
2024-08-22netfilter: flowtable: validate vlan headerPablo Neira Ayuso-0/+6
2024-08-20netfilter: nf_tables: don't initialize registers in nft_do_chain()Florian Westphal-1/+1
2024-08-20netfilter: nf_tables: allow loads only when register is initializedFlorian Westphal-4/+34
2024-08-20netfilter: nf_tables: pass context structure to nft_parse_register_loadFlorian Westphal-32/+33
2024-08-20netfilter: nft_counter: Synchronize nft_counter_reset() against reader.Sebastian Andrzej Siewior-0/+5
2024-08-20netfilter: nft_counter: Disable BH in nft_counter_offload_stats().Sebastian Andrzej Siewior-2/+2
2024-08-19netfilter: move nf_ct_netns_get out of nf_conncount_initXin Long-14/+16
2024-08-19netfilter: nf_tables: do not remove elements if set backend implements .abortPablo Neira Ayuso-1/+4
2024-08-19netfilter: nf_tables: store new sets in dedicated listFlorian Westphal-9/+20
2024-08-19netfilter: nfnetlink: convert kfree_skb to consume_skbDonald Hunter-7/+7
2024-08-19netfilter: nfnetlink_queue: unbreak SCTP trafficAntonio Ojea-2/+10
2024-08-14netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requestsPhil Sutter-13/+59
2024-08-14netfilter: nf_tables: Introduce nf_tables_getobj_singlePhil Sutter-31/+44
2024-08-14netfilter: nf_tables: Audit log dump reset after the factPhil Sutter-15/+13
2024-08-14netfilter: nf_queue: drop packets with cloned unconfirmed conntracksFlorian Westphal-2/+33
2024-08-14netfilter: flowtable: initialise extack before useDonald Hunter-1/+1
2024-08-14netfilter: nfnetlink: Initialise extack before use in ACKsDonald Hunter-1/+4
2024-07-25Merge tag 'net-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds-2/+10
2024-07-24sysctl: treewide: constify the ctl_table argument of proc_handlersJoel Granados-9/+9
2024-07-24netfilter: nft_set_pipapo_avx2: disable softinterruptsFlorian Westphal-2/+10
2024-07-21Merge tag 'mm-nonmm-stable-2024-07-21-15-07' of git://git.kernel.org/pub/scm/...Linus Torvalds-1/+1
2024-07-17ipvs: properly dereference pe in ip_vs_add_serviceChen Hanxiao-5/+5
2024-07-17netfilter: nf_set_pipapo: fix initial map fillFlorian Westphal-6/+29
2024-07-17netfilter: ctnetlink: use helper function to calculate expect IDPablo Neira Ayuso-1/+2
2024-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-146/+14
2024-07-11netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal-145/+13