summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables_offload: skip EBUSY on chain updatePablo Neira Ayuso2019-12-041-1/+2
* netfilter: nf_tables: bogus EOPNOTSUPP on basechain updatePablo Neira Ayuso2019-12-041-0/+1
* netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICTJozsef Kadlecsik2019-12-043-13/+30
* netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 setsStefano Brivio2019-11-121-1/+1
* netfilter: nft_payload: fix missing check for matching length in offloadswenxu2019-11-121-0/+38
* ipvs: move old_secure_tcp into struct netns_ipvsEric Dumazet2019-11-121-8/+7
* ipvs: don't ignore errors in case refcounting ip_vs module failsDavide Caratti2019-11-125-17/+28
* netfilter: nf_flow_table: set timeout before insertion into hashesPablo Neira Ayuso2019-11-121-1/+2
* netfilter: ipset: Fix an error code in ip_set_sockfn_get()Dan Carpenter2019-11-121-3/+5
* netfilter: conntrack: avoid possible false sharingEric Dumazet2019-11-061-2/+2
* netfilter: nft_connlimit: disable bh on garbage collectionPablo Neira Ayuso2019-10-291-1/+6
* netfilter: nf_tables: allow lookups in dynamic setsFlorian Westphal2019-10-112-5/+5
* netfilter: nf_flow_table: set default timeout after successful insertionPablo Neira Ayuso2019-09-031-1/+1
* netfilter: ctnetlink: honor IPS_OFFLOAD flagPablo Neira Ayuso2019-09-031-2/+5
* netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 modu...Leonardo Bras2019-09-031-0/+3
* netfilter: nft_socket: fix erroneous socket assignmentFernando Fernandez Mancera2019-09-021-3/+3
* netfilter: nf_flow_table: clear skb tstamp before xmitFlorian Westphal2019-08-291-1/+2
* netfilter: conntrack: make sysctls per-namespace againFlorian Westphal2019-08-271-0/+5
* netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch2019-08-271-1/+1
* netfilter: xt_physdev: Fix spurious error message in physdev_mt_checkTodd Seidelmann2019-08-271-4/+2
* netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro2019-08-191-11/+25
* netfilter: nft_flow_offload: missing netlink attribute policyPablo Neira Ayuso2019-08-191-0/+6
* netfilter: nf_tables: map basechain priority to hardware priorityPablo Neira Ayuso2019-08-182-3/+18
* netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso2019-08-141-3/+6
* netfilter: conntrack: Use consistent ct id hash calculationDirk Morris2019-08-131-8/+8
* netfilter: nf_flow_table: teardown flow timeout racePablo Neira Ayuso2019-08-091-9/+25
* netfilter: nf_flow_table: conntrack picks up expired flowsPablo Neira Ayuso2019-08-091-7/+10
* netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso2019-08-091-5/+10
* netfilter: nf_flow_table: fix offload for flows that are subject to xfrmFlorian Westphal2019-08-051-0/+43
* netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik2019-07-291-1/+1
* netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac...Stefano Brivio2019-07-292-2/+2
* netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets...Stefano Brivio2019-07-291-4/+0
* netfilter: nf_tables: Make nft_meta expression more robustPhil Sutter2019-07-251-12/+4
* net: flow_offload: add flow_block structure and use itPablo Neira Ayuso2019-07-192-3/+4
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2019-07-1934-64/+84
|\
| * netfilter: bridge: make NF_TABLES_BRIDGE tristateArnd Bergmann2019-07-192-2/+2
| * netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a modulePablo Neira Ayuso2019-07-181-1/+1
| * netfilter: synproxy: fix rst sequence number mismatchFernando Fernandez Mancera2019-07-181-2/+2
| * netfilter: nf_tables: Support auto-loading for inet natPhil Sutter2019-07-181-0/+3
| * netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana2019-07-161-1/+1
| * netfilter: nf_tables: don't fail when updating base chain policyFlorian Westphal2019-07-161-0/+2
| * netfilter: conntrack: always store window size un-scaledFlorian Westphal2019-07-161-3/+5
| * netfilter: synproxy: fix erroneous tcp mss optionFernando Fernandez Mancera2019-07-162-2/+4
| * netfilter: nf_tables: fix module autoload for redirChristian Hesse2019-07-161-1/+1
| * netfilter: Update obsolete comments referring to ip_conntrackYonatan Goldschmidt2019-07-166-14/+7
| * netfilter: nf_conntrack_sip: fix expectation clashxiao ruizhu2019-07-1618-38/+56
| * netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal2019-07-151-1/+1
* | proc/sysctl: add shared variables for range checkMatteo Croce2019-07-181-2/+1
|/
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2019-07-1169-512/+2909
|\
| * netfilter: nf_tables: add hardware offload supportPablo Neira Ayuso2019-07-097-7/+599