summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-08-1316-83/+133
|\
| * netfilter: nfnetlink_hook: translate inet ingress to netdevPablo Neira Ayuso2021-08-061-1/+7
| * netfilter: conntrack: remove offload_pickup sysctl againFlorian Westphal2021-08-064-21/+8
| * netfilter: nfnetlink_hook: Use same family as request messagePablo Neira Ayuso2021-08-061-3/+3
| * netfilter: nfnetlink_hook: use the sequence number of the request messagePablo Neira Ayuso2021-08-061-1/+2
| * netfilter: nfnetlink_hook: missing chain familyPablo Neira Ayuso2021-08-061-2/+6
| * netfilter: nfnetlink_hook: strip off module name from hookfnPablo Neira Ayuso2021-08-061-0/+1
| * netfilter: conntrack: collect all entries in one cycleFlorian Westphal2021-08-061-49/+22
| * netfilter: ipset: Limit the maximal range of consecutive elements to add/deleteJozsef Kadlecsik2021-08-0410-7/+85
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-08-117-72/+165
|\ \
| * | netfilter: nf_queue: move hookfn registration out of struct netFlorian Westphal2021-08-102-12/+22
| * | netfilter: x_tables: never register tables by defaultFlorian Westphal2021-08-091-18/+80
| * | netfilter: ctnetlink: allow to filter dump by status bitsFlorian Westphal2021-08-051-1/+33
| * | netfilter: ctnetlink: add and use a helper for mark parsingFlorian Westphal2021-08-051-15/+27
| * | netfilter: remove xt pernet dataFlorian Westphal2021-08-011-11/+0
| * | netfilter: flowtable: remove nf_ct_l4proto_find() callPablo Neira Ayuso2021-08-011-10/+0
| * | netfilter: nft_compat: use nfnetlink_unicast()Pablo Neira Ayuso2021-08-011-5/+3
* | | net: Remove redundant if statementsYajun Deng2021-08-052-18/+9
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-07-316-10/+41
|\ \ \ | |/ / |/| / | |/
| * netfilter: nfnl_hook: fix unused variable warningArnd Bergmann2021-07-231-0/+2
| * netfilter: nft_nat: allow to specify layer 4 protocol NAT onlyPablo Neira Ayuso2021-07-231-1/+3
| * netfilter: conntrack: adjust stop timestamp to real expiry valueFlorian Westphal2021-07-231-1/+6
| * netfilter: nft_last: avoid possible false sharingPablo Neira Ayuso2021-07-231-7/+13
| * netfilter: flowtable: avoid possible false sharingPablo Neira Ayuso2021-07-231-1/+5
| * netfilter: nf_tables: fix audit memory leak in nf_tables_commitDongliang Mu2021-07-171-0/+12
* | net: ipv6: introduce ip6_dst_mtu_maybe_forwardVadim Fedorenko2021-07-211-1/+1
|/
* netfilter: nft_last: incorrect arithmetics when restoring last usedPablo Neira Ayuso2021-07-061-1/+1
* netfilter: nft_last: honor NFTA_LAST_SET on restorationPablo Neira Ayuso2021-07-061-2/+8
* netfilter: conntrack: Mark access for KCSANManfred Spraul2021-07-061-1/+9
* netfilter: conntrack: add new sysctl to disable RST checkAli Abdallah2021-07-062-1/+15
* netfilter: conntrack: improve RST handling when tuple is re-usedAli Abdallah2021-07-061-17/+36
* netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin2021-07-021-0/+3
* netfilter: conntrack: nf_ct_gre_keymap_flush() removalVasily Averin2021-07-023-21/+0
* netfilter: nf_tables: Fix dereference of null pointer flowColin Ian King2021-07-021-1/+2
* netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT stateFlorian Westphal2021-07-021-0/+10
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-295-52/+64
|\
| * netfilter: nf_tables: do not allow to delete table with owner by handlePablo Neira Ayuso2021-06-221-3/+9
| * netfilter: nf_tables: skip netlink portID validation if zeroPablo Neira Ayuso2021-06-221-1/+1
| * netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer...Pablo Neira Ayuso2021-06-211-10/+7
| * netfilter: nf_tables: memleak in hw offload abort pathPablo Neira Ayuso2021-06-212-37/+31
| * netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso2021-06-161-1/+8
| * netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso2021-06-161-0/+5
| * netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso2021-06-161-0/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-06-2312-40/+132
|\ \
| * | netfilter: nfnetlink_hook: fix check for snprintf() overflowDan Carpenter2021-06-211-1/+3
| * | netfilter: conntrack: pass hook state to log functionsFlorian Westphal2021-06-187-36/+35
| * | netfilter: nf_tables: add last expressionPablo Neira Ayuso2021-06-173-1/+89
| * | netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter2021-06-161-1/+1
| * | netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter2021-06-161-1/+4
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-182-42/+48
|\ \ \ | |/ / |/| / | |/