summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: bail out early if hardware offload is not supportedPablo Neira Ayuso2022-06-062-2/+23
* netfilter: nf_tables: memleak flow rule from commit pathPablo Neira Ayuso2022-06-061-0/+6
* netfilter: nf_tables: release new hooks on unsupported flowtable flagsPablo Neira Ayuso2022-06-061-4/+8
* netfilter: nf_tables: always initialize flowtable hook list in transactionPablo Neira Ayuso2022-06-021-0/+1
* netfilter: nf_tables: delete flowtable hooks via transaction listPablo Neira Ayuso2022-06-021-25/+6
* netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net pathPablo Neira Ayuso2022-06-011-1/+1
* netfilter: nat: really support inet nat without l3 addressFlorian Westphal2022-06-011-1/+2
* netfilter: flowtable: fix nft_flow_route source address for nat casewenxu2022-05-311-2/+2
* netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flagwenxu2022-05-311-0/+2
* netfilter: nf_tables: double hook unregistration in netns pathPablo Neira Ayuso2022-05-311-13/+41
* netfilter: nf_tables: hold mutex on netns pre_exit pathPablo Neira Ayuso2022-05-311-0/+4
* netfilter: nf_tables: sanitize nft_set_desc_concat_parse()Pablo Neira Ayuso2022-05-311-4/+13
* netfilter: nf_tables: set element extended ACK reporting supportPablo Neira Ayuso2022-05-271-3/+9
* netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exitFlorian Westphal2022-05-271-2/+3
* netfilter: nfnetlink: fix warn in nfnetlink_unbindFlorian Westphal2022-05-271-19/+5
* netfilter: nft_limit: Clone packet limits' cost valuePhil Sutter2022-05-261-0/+2
* netfilter: nf_tables: disallow non-stateful expression in sets earlierPablo Neira Ayuso2022-05-261-9/+10
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski2022-05-193-48/+17
|\
| * netfilter: ctnetlink: fix up for "netfilter: conntrack: remove unconfirmed list"Stephen Rothwell2022-05-181-0/+2
| * netfilter: conntrack: remove pr_debug callsites from tcp trackerFlorian Westphal2022-05-161-48/+4
| * netfilter: nf_conncount: reduce unnecessary GCWilliam Tu2022-05-161-0/+11
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2022-05-194-70/+48
|\ \ | |/ |/|
| * netfilter: nf_tables: disable expression reduction infraPablo Neira Ayuso2022-05-181-10/+1
| * netfilter: flowtable: move dst_check to packet pathRitaro Takenaka2022-05-182-22/+20
| * netfilter: flowtable: fix TCP flow teardownPablo Neira Ayuso2022-05-182-27/+9
| * netfilter: nft_flow_offload: fix offload with pppoe + vlanFelix Fietkau2022-05-161-1/+2
| * netfilter: nft_flow_offload: skip dst neigh lookup for ppp devicesFelix Fietkau2022-05-161-9/+13
| * netfilter: flowtable: fix excessive hw offload attempts after failureFelix Fietkau2022-05-161-1/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller2022-05-1612-300/+411
|\ \
| * | netfilter: flowtable: nft_flow_route use more data for reverse routeSven Auhagen2022-05-131-0/+8
| * | netfilter: conntrack: add nf_conntrack_events autodetect modeFlorian Westphal2022-05-133-8/+24
| * | netfilter: conntrack: un-inline nf_ct_ecache_ext_addFlorian Westphal2022-05-132-3/+33
| * | netfilter: nfnetlink: allow to detect if ctnetlink listeners existFlorian Westphal2022-05-131-3/+37
| * | netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*()Pablo Neira Ayuso2022-05-135-41/+47
| * | netfilter: conntrack: avoid unconditional local_bh_disableFlorian Westphal2022-05-131-5/+2
| * | netfilter: conntrack: remove unconfirmed listFlorian Westphal2022-05-132-98/+3
| * | netfilter: conntrack: remove __nf_ct_unconfirmed_destroyFlorian Westphal2022-05-133-39/+13
| * | netfilter: cttimeout: decouple unlink and free on netns destructionFlorian Westphal2022-05-131-0/+12
| * | netfilter: extensions: introduce extension genid countFlorian Westphal2022-05-132-1/+86
| * | netfilter: remove nf_ct_unconfirmed_destroy helperFlorian Westphal2022-05-132-15/+3
| * | netfilter: cttimeout: decouple unlink and free on netns destructionFlorian Westphal2022-05-131-2/+28
| * | netfilter: conntrack: remove the percpu dying listFlorian Westphal2022-05-133-46/+13
| * | netfilter: conntrack: include ecache dying list in dumpsFlorian Westphal2022-05-132-0/+53
| * | netfilter: ecache: use dedicated list for event redeliveryFlorian Westphal2022-05-132-70/+80
* | | net: sysctl: introduce sysctl SYSCTL_THREETonghao Zhang2022-05-031-3/+1
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2022-04-285-32/+51
|\ \ \ | |/ / |/| / | |/
| * netfilter: nft_socket: only do sk lookups when indev is availableFlorian Westphal2022-04-281-14/+38
| * netfilter: conntrack: fix udp offload timeout sysctlVolodymyr Mytnyk2022-04-271-1/+1
| * netfilter: nf_conntrack_tcp: re-init for syn packets onlyFlorian Westphal2022-04-271-15/+6
| * netfilter: nft_set_rbtree: overlap detection with element re-addition after d...Pablo Neira Ayuso2022-04-221-1/+5