summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2021-08-04netfilter: ipset: Limit the maximal range of consecutive elements to add/deleteJozsef Kadlecsik-7/+85
2021-08-01netfilter: remove xt pernet dataFlorian Westphal-11/+0
2021-08-01netfilter: flowtable: remove nf_ct_l4proto_find() callPablo Neira Ayuso-10/+0
2021-08-01netfilter: nft_compat: use nfnetlink_unicast()Pablo Neira Ayuso-5/+3
2021-07-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-10/+41
2021-07-23netfilter: nfnl_hook: fix unused variable warningArnd Bergmann-0/+2
2021-07-23netfilter: nft_nat: allow to specify layer 4 protocol NAT onlyPablo Neira Ayuso-1/+3
2021-07-23netfilter: conntrack: adjust stop timestamp to real expiry valueFlorian Westphal-1/+6
2021-07-23netfilter: nft_last: avoid possible false sharingPablo Neira Ayuso-7/+13
2021-07-23netfilter: flowtable: avoid possible false sharingPablo Neira Ayuso-1/+5
2021-07-21net: ipv6: introduce ip6_dst_mtu_maybe_forwardVadim Fedorenko-1/+1
2021-07-17netfilter: nf_tables: fix audit memory leak in nf_tables_commitDongliang Mu-0/+12
2021-07-06netfilter: nft_last: incorrect arithmetics when restoring last usedPablo Neira Ayuso-1/+1
2021-07-06netfilter: nft_last: honor NFTA_LAST_SET on restorationPablo Neira Ayuso-2/+8
2021-07-06netfilter: conntrack: Mark access for KCSANManfred Spraul-1/+9
2021-07-06netfilter: conntrack: add new sysctl to disable RST checkAli Abdallah-1/+15
2021-07-06netfilter: conntrack: improve RST handling when tuple is re-usedAli Abdallah-17/+36
2021-07-02netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin-0/+3
2021-07-02netfilter: conntrack: nf_ct_gre_keymap_flush() removalVasily Averin-21/+0
2021-07-02netfilter: nf_tables: Fix dereference of null pointer flowColin Ian King-1/+2
2021-07-02netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT stateFlorian Westphal-0/+10
2021-06-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-52/+64
2021-06-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-40/+132
2021-06-22netfilter: nf_tables: do not allow to delete table with owner by handlePablo Neira Ayuso-3/+9
2021-06-22netfilter: nf_tables: skip netlink portID validation if zeroPablo Neira Ayuso-1/+1
2021-06-21netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer...Pablo Neira Ayuso-10/+7
2021-06-21netfilter: nf_tables: memleak in hw offload abort pathPablo Neira Ayuso-37/+31
2021-06-21netfilter: nfnetlink_hook: fix check for snprintf() overflowDan Carpenter-1/+3
2021-06-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-42/+48
2021-06-18netfilter: conntrack: pass hook state to log functionsFlorian Westphal-36/+35
2021-06-17netfilter: nf_tables: add last expressionPablo Neira Ayuso-1/+89
2021-06-16netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter-1/+1
2021-06-16netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter-1/+4
2021-06-16netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso-1/+8
2021-06-16netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso-0/+5
2021-06-16netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso-0/+3
2021-06-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller-42/+43
2021-06-10netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy-0/+5
2021-06-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-203/+615
2021-06-09netfilter: nf_tables: move base hook annotation to init helperFlorian Westphal-8/+7
2021-06-09netfilter: nfnetlink_hook: add depends-on nftablesFlorian Westphal-0/+1
2021-06-09netfilter: nfnetlink_hook: fix array index out-of-bounds errorColin Ian King-1/+1
2021-06-09netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso-42/+43
2021-06-09netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter-1/+3
2021-06-07Merge ra.kernel.org:/pub/scm/linux/kernel/git/netdev/netDavid S. Miller-32/+66
2021-06-07netfilter: add new hook nfnl subsystemFlorian Westphal-0/+386
2021-06-07netfilter: annotate nf_tables base hook opsFlorian Westphal-1/+3
2021-06-07netfilter: flowtable: Set offload timeouts according to proto valuesOz Shlomo-12/+39
2021-06-07netfilter: conntrack: Introduce udp offload timeout configurationOz Shlomo-0/+27
2021-06-07netfilter: conntrack: Introduce tcp offload timeout configurationOz Shlomo-0/+29