aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2025-05-05netfilter: nf_conntrack: speed up reads from nf_conntrack proc fileFlorian Westphal1-35/+53
2025-05-05netfilter: nft_quota: match correctly when the quota just depletedZhongqiu Duan1-7/+13
2025-04-29netfilter: nf_tables: export set count and backend name to userspaceFlorian Westphal1-0/+26
2025-04-29netfilter: conntrack: Remove redundant NFCT_ALIGN callXuanqiang Luo1-3/+1
2025-04-24net: cgroup: Guard users of sock_cgroup_classid()Michal Koutný1-0/+9
2025-04-24netfilter: xt_cgroup: Make it independent from net_clsMichal Koutný2-1/+18
2025-04-24netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies()Easwar Hariharan1-6/+6
2025-04-17netfilter: conntrack: fix erronous removal of offload bitFlorian Westphal1-4/+6
2025-04-10Merge tag 'net-6.15-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-1/+2
2025-04-10nft_set_pipapo: fix incorrect avx2 match of 5th field octetFlorian Westphal1-1/+2
2025-04-08Merge tag 'crc-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds2-3/+3
2025-04-05treewide: Switch/rename to timer_delete[_sync]()Thomas Gleixner6-13/+13
2025-04-04lib/crc: remove CONFIG_LIBCRC32CEric Biggers2-3/+3
2025-04-03Merge tag 'nf-25-04-03' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski3-5/+6
2025-04-03net: fix geneve_opt length integer overflowLin Ma1-1/+1
2025-04-03netfilter: nft_tunnel: fix geneve_opt type confusion additionLin Ma1-2/+2
2025-04-02netfilter: nf_tables: don't unregister hook when table is dormantFlorian Westphal1-2/+2
2025-04-02netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso1-1/+2
2025-03-25Merge tag 'nf-next-25-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski5-19/+20
2025-03-23netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPO...WangYuli1-7/+4
2025-03-23netfilter: xtables: Use strscpy() instead of strscpy_pad()Thorsten Blum1-1/+1
2025-03-23netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation errorChenyuan Yang1-1/+1
2025-03-17tcp: extend TCP flags to allow AE bit/ACE fieldIlpo Järvinen1-3/+5
2025-03-13netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-12netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet1-3/+9
2025-03-12netfilter: xt_hashlimit: replace vmalloc calls with kvmallocDenis Kirjanov1-7/+5
2025-03-12ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-12netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-03-06net: hold netdev instance lock during nft ndo_setup_tcStanislav Fomichev2-2/+2
2025-03-06netfilter: nf_tables: make destruction work queue pernetFlorian Westphal2-14/+18
2025-03-05netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen1-2/+2
2025-03-03netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-02-12Revert "netfilter: flowtable: teardown flow if cached mtu is stale"Pablo Neira Ayuso1-6/+2
2025-01-30Merge tag 'net-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-4/+4
2025-01-30Merge tag 'nf-25-01-30' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski1-4/+4
2025-01-30netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-01-26Merge tag 'mm-nonmm-stable-2025-01-24-23-16' of git://git.kernel.org/pub/scm/...Linus Torvalds1-13/+8
2025-01-22Merge tag 'net-next-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds17-167/+405
2025-01-21Merge tag 'lsm-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-28/+29
2025-01-19netfilter: flowtable: add CLOSING statePablo Neira Ayuso2-19/+57
2025-01-19netfilter: flowtable: teardown flow if cached mtu is stalePablo Neira Ayuso1-2/+6
2025-01-19netfilter: conntrack: rework offload nf_conn timeout extension logicFlorian Westphal2-8/+103
2025-01-19netfilter: conntrack: remove skb argument from nf_ct_refreshFlorian Westphal6-11/+10
2025-01-19netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-01-19netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpathFlorian Westphal1-2/+12
2025-01-19netfilter: nf_tables: Simplify chain netdev notifierPhil Sutter1-14/+7
2025-01-19netfilter: nf_tables: Tolerate chains with no remaining hooksPhil Sutter2-63/+7
2025-01-19netfilter: nf_tables: Compare netdev hooks based on stored namePhil Sutter1-1/+1
2025-01-19netfilter: nf_tables: Use stored ifname in netdev hook dumpsPhil Sutter1-4/+6
2025-01-19netfilter: nf_tables: Store user-defined hook ifnamePhil Sutter1-3/+7