summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nfnetlink_osf: fix module autoloadPablo Neira Ayuso2023-06-282-1/+1
* netfilter: nf_tables: disallow updates of anonymous setsPablo Neira Ayuso2023-06-281-0/+3
* netfilter: nf_tables: reject unbound chain set before commit phasePablo Neira Ayuso2023-06-281-0/+13
* netfilter: nf_tables: reject unbound anonymous set before commit phasePablo Neira Ayuso2023-06-281-3/+32
* netfilter: nf_tables: disallow element updates of bound anonymous setsPablo Neira Ayuso2023-06-281-2/+5
* netfilter: nft_set_pipapo: .walk does not deal with generationsPablo Neira Ayuso2023-06-281-1/+5
* netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chainPablo Neira Ayuso2023-06-282-7/+41
* netfilter: nf_tables: fix chain binding transaction logicPablo Neira Ayuso2023-06-282-40/+133
* ipvs: align inner_mac_header for encapsulationTerin Stock2023-06-281-0/+2
* netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULEPablo Neira Ayuso2023-06-211-1/+2
* netfilter: nfnetlink: skip error delivery on batch in case of ENOMEMPablo Neira Ayuso2023-06-211-1/+2
* netfilter: nf_tables: integrate pipapo into commit protocolPablo Neira Ayuso2023-06-212-15/+96
* Remove DECnet support from kernelStephen Hemminger2023-06-212-17/+0
* netfilter: ipset: Add schedule point in call_ad().Kuniyuki Iwashima2023-06-141-0/+8
* netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelperTijs Van Buggenhout2023-06-141-0/+3
* netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with C...Tom Rix2023-06-091-0/+4
* netfilter: ctnetlink: Support offloaded conntrack entry deletionPaul Blakey2023-06-051-8/+0
* netfilter: nft_set_rbtree: fix null deref on element insertionFlorian Westphal2023-05-241-7/+13
* netfilter: nf_tables: fix nft_trans type confusionFlorian Westphal2023-05-241-3/+1
* ipvs: Update width of source for ip_vs_sync_conn_optionsSimon Horman2023-05-241-1/+1
* netfilter: conntrack: fix possible bug_on with enable_hooks=1Florian Westphal2023-05-242-3/+6
* netfilter: nf_tables: always release netdev hooks from notifierFlorian Westphal2023-05-241-3/+6
* netfilter: nf_tables: deactivate anonymous set from preparation phasePablo Neira Ayuso2023-05-114-3/+15
* netfilter: nf_tables: don't write table validation state without mutexFlorian Westphal2023-05-112-8/+2
* netfilter: nf_tables: tighten netlink attribute requirements for catch-all el...Pablo Neira Ayuso2023-04-261-1/+2
* netfilter: nf_tables: validate catch-all set elementsPablo Neira Ayuso2023-04-262-38/+62
* netfilter: nft_redir: correct value of inet type `.maxattrs`Jeremy Sowden2023-03-221-1/+1
* netfilter: nft_redir: correct length for loading protocol registersJeremy Sowden2023-03-221-1/+1
* netfilter: nft_masq: correct length for loading protocol registersJeremy Sowden2023-03-221-1/+1
* netfilter: nft_nat: correct length for loading protocol registersJeremy Sowden2023-03-221-1/+1
* netfilter: conntrack: adopt safer max chain lengthEric Dumazet2023-03-171-2/+2
* netfilter: ctnetlink: revert to dumping mark regardless of event typeIvan Delalande2023-03-171-7/+7
* netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()Hangyu Hua2023-03-111-1/+4
* netfilter: nf_tables: allow to fetch set elements when table has an ownerPablo Neira Ayuso2023-03-111-1/+1
* netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()Alok Tiwari2023-03-101-0/+3
* netfilter: nft_tproxy: restrict to prerouting hookFlorian Westphal2023-02-221-0/+8
* netfilter: conntrack: unify established states for SCTP pathsSriram Yagnaraman2023-02-012-62/+39
* netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETESriram Yagnaraman2023-02-011-9/+16
* netfilter: nft_set_rbtree: skip elements in transaction from garbage collectionPablo Neira Ayuso2023-02-011-1/+15
* netfilter: nft_set_rbtree: Switch to node list walk for overlap detectionPablo Neira Ayuso2023-02-011-127/+189
* netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.Gavrilov Ilia2023-01-181-2/+2
* netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bitsPablo Neira Ayuso2023-01-181-1/+1
* netfilter: ipset: Rework long task execution when adding/deleting entriesJozsef Kadlecsik2023-01-1210-80/+67
* netfilter: ipset: fix hash:net,port,net hang with /0 subnetJozsef Kadlecsik2023-01-121-19/+21
* netfilter: nf_tables: honor set timeout and garbage collection updatesPablo Neira Ayuso2023-01-121-18/+45
* netfilter: nf_tables: perform type checking for existing setsPablo Neira Ayuso2023-01-121-1/+35
* netfilter: nf_tables: add function to create set stateful expressionsPablo Neira Ayuso2023-01-121-38/+68
* netfilter: nf_tables: consolidate set descriptionPablo Neira Ayuso2023-01-121-30/+28
* netfilter: flowtable: really fix NAT IPv6 offloadQingfang DENG2022-12-311-3/+3
* netfilter: conntrack: set icmpv6 redirects as RELATEDFlorian Westphal2022-12-311-0/+53