summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_flow_table: clear skb tstamp before xmitFlorian Westphal2019-08-291-1/+2
* netfilter: conntrack: make sysctls per-namespace againFlorian Westphal2019-08-271-0/+5
* netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch2019-08-271-1/+1
* netfilter: xt_physdev: Fix spurious error message in physdev_mt_checkTodd Seidelmann2019-08-271-4/+2
* netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro2019-08-191-11/+25
* netfilter: nft_flow_offload: missing netlink attribute policyPablo Neira Ayuso2019-08-191-0/+6
* netfilter: nf_tables: map basechain priority to hardware priorityPablo Neira Ayuso2019-08-182-3/+18
* netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso2019-08-141-3/+6
* netfilter: conntrack: Use consistent ct id hash calculationDirk Morris2019-08-131-8/+8
* netfilter: nf_flow_table: teardown flow timeout racePablo Neira Ayuso2019-08-091-9/+25
* netfilter: nf_flow_table: conntrack picks up expired flowsPablo Neira Ayuso2019-08-091-7/+10
* netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso2019-08-091-5/+10
* netfilter: nf_flow_table: fix offload for flows that are subject to xfrmFlorian Westphal2019-08-051-0/+43
* netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik2019-07-291-1/+1
* netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac...Stefano Brivio2019-07-292-2/+2
* netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets...Stefano Brivio2019-07-291-4/+0
* netfilter: nf_tables: Make nft_meta expression more robustPhil Sutter2019-07-251-12/+4
* net: flow_offload: add flow_block structure and use itPablo Neira Ayuso2019-07-192-3/+4
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2019-07-1934-64/+84
|\
| * netfilter: bridge: make NF_TABLES_BRIDGE tristateArnd Bergmann2019-07-192-2/+2
| * netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a modulePablo Neira Ayuso2019-07-181-1/+1
| * netfilter: synproxy: fix rst sequence number mismatchFernando Fernandez Mancera2019-07-181-2/+2
| * netfilter: nf_tables: Support auto-loading for inet natPhil Sutter2019-07-181-0/+3
| * netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana2019-07-161-1/+1
| * netfilter: nf_tables: don't fail when updating base chain policyFlorian Westphal2019-07-161-0/+2
| * netfilter: conntrack: always store window size un-scaledFlorian Westphal2019-07-161-3/+5
| * netfilter: synproxy: fix erroneous tcp mss optionFernando Fernandez Mancera2019-07-162-2/+4
| * netfilter: nf_tables: fix module autoload for redirChristian Hesse2019-07-161-1/+1
| * netfilter: Update obsolete comments referring to ip_conntrackYonatan Goldschmidt2019-07-166-14/+7
| * netfilter: nf_conntrack_sip: fix expectation clashxiao ruizhu2019-07-1618-38/+56
| * netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal2019-07-151-1/+1
* | proc/sysctl: add shared variables for range checkMatteo Croce2019-07-181-2/+1
|/
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2019-07-1169-512/+2909
|\
| * netfilter: nf_tables: add hardware offload supportPablo Neira Ayuso2019-07-097-7/+599
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2019-07-088-81/+100
| |\
| | * net: make skb_dst_force return true when dst is refcountedFlorian Westphal2019-06-291-1/+5
| | * Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2019-06-287-80/+95
| | |\
| | | * netfilter: Fix remainder of pseudo-header protocol 0He Zhe2019-06-283-4/+5
| | | * netfilter: ctnetlink: Fix regression in conntrack entry deletionFelix Kaechele2019-06-261-3/+4
| | | * ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov2019-06-252-66/+72
| | | * ipvs: defer hook registration to avoid leaksJulian Anastasov2019-06-211-7/+14
| * | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2019-07-0813-76/+472
| |\ \ \
| | * | | netfilter: nf_tables: force module load in case select_ops() returns -EAGAINPablo Neira Ayuso2019-07-062-0/+10
| | * | | netfilter: nf_tables: __nft_expr_type_get() selects specific family typePablo Neira Ayuso2019-07-051-5/+8
| | * | | netfilter: nf_tables: add nft_expr_type_request_module()Pablo Neira Ayuso2019-07-051-3/+14
| | * | | netfilter: nft_meta: move bridge meta keys into nft_meta_bridgewenxu2019-07-052-53/+29
| | * | | ipvs: strip gre tunnel headers from icmp errorsJulian Anastasov2019-07-051-4/+42
| | * | | netfilter: nf_tables: Add synproxy supportFernando Fernandez Mancera2019-07-053-0/+299
| | * | | ipvs: allow tunneling with gre encapsulationVadim Fedorenko2019-07-042-3/+64
| | * | | netfilter: nf_queue: remove unused hook entries pointerFlorian Westphal2019-07-042-6/+4