summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutexPavel Skripkin2021-09-221-1/+8
* netfilter: Fix fall-through warnings for ClangGustavo A. R. Silva2021-09-223-0/+3
* net: Fix offloading indirect devices dependency on qdisc order creationEli Cohen2021-09-182-0/+2
* netfilter: nftables: clone set element expression templatePablo Neira Ayuso2021-09-121-8/+28
* netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso2021-09-121-22/+24
* netfilter: nftables: avoid potential overflows on 32bit archesEric Dumazet2021-09-122-7/+10
* netfilter: conntrack: collect all entries in one cycleFlorian Westphal2021-09-031-49/+22
* netfilter: nft_nat: allow to specify layer 4 protocol NAT onlyPablo Neira Ayuso2021-08-041-1/+3
* netfilter: conntrack: adjust stop timestamp to real expiry valueFlorian Westphal2021-08-041-1/+6
* netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin2021-07-251-0/+3
* netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer...Pablo Neira Ayuso2021-07-141-10/+7
* netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso2021-07-141-1/+8
* netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso2021-07-141-0/+5
* netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso2021-07-141-0/+3
* netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy2021-06-231-0/+5
* netfilter: nf_tables: missing error reporting for not selected expressionsPablo Neira Ayuso2021-06-101-1/+3
* netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatchesPablo Neira Ayuso2021-06-101-2/+6
* netfilter: nft_ct: skip expectations for confirmed conntrackPablo Neira Ayuso2021-06-101-1/+1
* ipvs: ignore IP_VS_SVC_F_HASHED flag when adding serviceJulian Anastasov2021-06-101-1/+1
* netfilter: conntrack: unregister ipv4 sockopts on error unwindFlorian Westphal2021-06-101-1/+1
* netfilter: flowtable: Remove redundant hw refresh bitRoi Dayan2021-06-032-5/+5
* netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-A...Stefano Brivio2021-06-033-2/+7
* netfilter: nftables: avoid overflows in nft_hash_buckets()Eric Dumazet2021-05-191-1/+9
* netfilter: nftables: Fix a memleak from userdata error path in new objectsPablo Neira Ayuso2021-05-191-2/+2
* netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL checkPablo Neira Ayuso2021-05-191-0/+2
* netfilter: xt_SECMARK: add new revision to fix structure layoutPablo Neira Ayuso2021-05-191-19/+69
* netfilter: nftables_offload: special ethertype handling for VLANPablo Neira Ayuso2021-05-141-0/+44
* netfilter: nftables_offload: VLAN id needs host byteorder in flow dissectorPablo Neira Ayuso2021-05-142-6/+45
* netfilter: nft_payload: fix C-VLAN offload supportPablo Neira Ayuso2021-05-141-2/+3
* netfilter: conntrack: Make global sysctls readonly in non-init netnsJonathon Reinhart2021-05-071-8/+2
* netfilter: nft_limit: avoid possible divide error in nft_limit_initEric Dumazet2021-04-211-2/+2
* netfilter: conntrack: do not print icmpv6 as unknown via /procPablo Neira Ayuso2021-04-211-0/+1
* netfilter: flowtable: fix NAT IPv6 offload manglingPablo Neira Ayuso2021-04-211-3/+3
* netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2021-04-161-8/+2
* netfilter: nftables: skip hook overlap logic if flowtable is stalePablo Neira Ayuso2021-04-101-0/+3
* netfilter: conntrack: Fix gre tunneling over ipv6Ludovic Senecaux2021-04-101-3/+0
* netfilter: x_tables: Use correct memory barriers.Mark Tomlinson2021-03-301-1/+1
* Revert "netfilter: x_tables: Switch synchronization to RCU"Mark Tomlinson2021-03-301-15/+34
* netfilter: flowtable: Make sure GC works periodically in idle systemYinjun Zhang2021-03-301-1/+1
* netfilter: nftables: allow to update flowtable flagsPablo Neira Ayuso2021-03-301-0/+15
* netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flagsPablo Neira Ayuso2021-03-301-1/+3
* netfilter: ctnetlink: fix dump of the expect mask attributeFlorian Westphal2021-03-301-0/+1
* netfilter: x_tables: gpf inside xt_find_revision()Vasily Averin2021-03-171-2/+4
* netfilter: nf_nat: undo erroneous tcp edemux lookupFlorian Westphal2021-03-171-4/+21
* netfilter: conntrack: skip identical origin tuple in same zone onlyFlorian Westphal2021-02-171-1/+2
* netfilter: flowtable: fix tcp and udp header checksum updateSven Auhagen2021-02-171-2/+2
* netfilter: nftables: fix possible UAF over chains from packet path in netnsPablo Neira Ayuso2021-02-171-6/+19
* netfilter: xt_recent: Fix attempt to update deleted entryJozsef Kadlecsik2021-02-171-2/+10
* netfilter: nft_dynset: add timeout extension to templatePablo Neira Ayuso2021-02-031-1/+3
* netfilter: nf_nat: Fix memleak in nf_nat_initDinghao Liu2021-01-191-0/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-17 07:31:43 +0000