summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2022-09-20netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()Tetsuo Handa-0/+1
2022-09-20netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()Tetsuo Handa-4/+3
2022-09-20bpf: Move nf_conn extern declarations to filter.hDaniel Xu-0/+1
2022-09-20bpf: Rename nfct_bsa to nfct_btf_struct_accessDaniel Xu-2/+2
2022-09-10bpf: Add support for writing to nf_conn:markDaniel Xu-1/+66
2022-09-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller-196/+259
2022-09-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni-97/+17
2022-09-07netfilter: nat: avoid long-running port range loopFlorian Westphal-2/+14
2022-09-07netfilter: nat: move repetitive nat port reserve loop to a helperFlorian Westphal-55/+25
2022-09-07netfilter: move from strlcpy with unused retval to strscpyWolfram Sang-21/+21
2022-09-07netfilter: conntrack: reduce timeout when receiving out-of-window fin or rstFlorian Westphal-0/+58
2022-09-07netfilter: conntrack: remove unneeded indent levelFlorian Westphal-53/+45
2022-09-07netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()Pablo Neira Ayuso-1/+3
2022-09-07netfilter: nf_conntrack_irc: Tighten matching on DCC messageDavid Leadbeater-6/+28
2022-09-07netfilter: conntrack: ignore overly delayed tcp packetsFlorian Westphal-28/+21
2022-09-07netfilter: conntrack: prepare tcp_in_window for ternary return valueFlorian Westphal-49/+87
2022-09-07netfilter: nf_conntrack_sip: fix ct_sip_walk_headersIgor Ryzhov-2/+2
2022-09-07netfilter: nft_payload: reject out-of-range attributes via policyFlorian Westphal-3/+3
2022-09-05netlink: Bounds-check struct nlmsgerr creationKees Cook-3/+5
2022-09-01netfilter: nf_conntrack_irc: Fix forged IP logicDavid Leadbeater-2/+3
2022-08-31netfilter: nf_tables: clean up hook list when offload flags check failsPablo Neira Ayuso-1/+3
2022-08-31netfilter: remove nf_conntrack_helper sysctl and modparam togglesPablo Neira Ayuso-94/+11
2022-08-29genetlink: start to validate reserved header bytesJakub Kicinski-0/+1
2022-08-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-22/+106
2022-08-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski-20/+104
2022-08-24net: Fix data-races around sysctl_[rw]mem_(max|default).Kuniyuki Iwashima-2/+2
2022-08-24netfilter: flowtable: fix stuck flows on cleanup due to pending workPablo Neira Ayuso-4/+11
2022-08-24netfilter: flowtable: add function to invoke garbage collection immediatelyPablo Neira Ayuso-3/+9
2022-08-24netfilter: nf_tables: disallow binding to already bound chainPablo Neira Ayuso-0/+2
2022-08-24netfilter: nft_tunnel: restrict it to netdev familyPablo Neira Ayuso-0/+1
2022-08-24netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet familiesPablo Neira Ayuso-3/+15
2022-08-24netfilter: nf_tables: do not leave chain stats enabled on errorPablo Neira Ayuso-2/+4
2022-08-24netfilter: nft_payload: do not truncate csum_offset and csum_typePablo Neira Ayuso-6/+13
2022-08-24netfilter: nft_payload: report ERANGE for too long offset and lengthPablo Neira Ayuso-2/+8
2022-08-24netfilter: nf_tables: make table handle allocation per-netns friendlyPablo Neira Ayuso-2/+1
2022-08-24netfilter: nf_tables: disallow updates of implicit chainPablo Neira Ayuso-0/+3
2022-08-23netfilter: nft_tproxy: restrict to prerouting hookFlorian Westphal-0/+8
2022-08-23netfilter: conntrack: work around exceeded receive windowFlorian Westphal-0/+31
2022-08-22Remove DECnet support from kernelStephen Hemminger-17/+0
2022-08-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-90/+182
2022-08-17Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski-6/+0
2022-08-17netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to yGeert Uytterhoeven-1/+0
2022-08-15cgroup: Replace cgroup->ancestor_ids[] with ->ancestors[]Tejun Heo-4/+5
2022-08-15netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specifiedPablo Neira Ayuso-0/+5
2022-08-15netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVA...Pablo Neira Ayuso-0/+3
2022-08-15netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flagsPablo Neira Ayuso-0/+24
2022-08-12netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flagPablo Neira Ayuso-4/+9
2022-08-11netfilter: nf_tables: really skip inactive sets when allocating namePablo Neira Ayuso-1/+1
2022-08-11netfilter: nfnetlink: re-enable conntrack expectation eventsFlorian Westphal-12/+71
2022-08-11netfilter: nf_tables: fix scheduling-while-atomic splatFlorian Westphal-4/+0
generated by cgit v1.2.3 (git 2.46.0) at 2026-05-09 06:00:45 +0000