summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* net: ipv6: introduce ip6_dst_mtu_maybe_forwardVadim Fedorenko2021-07-211-1/+1
* netfilter: nft_last: incorrect arithmetics when restoring last usedPablo Neira Ayuso2021-07-061-1/+1
* netfilter: nft_last: honor NFTA_LAST_SET on restorationPablo Neira Ayuso2021-07-061-2/+8
* netfilter: conntrack: Mark access for KCSANManfred Spraul2021-07-061-1/+9
* netfilter: conntrack: add new sysctl to disable RST checkAli Abdallah2021-07-062-1/+15
* netfilter: conntrack: improve RST handling when tuple is re-usedAli Abdallah2021-07-061-17/+36
* netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin2021-07-021-0/+3
* netfilter: conntrack: nf_ct_gre_keymap_flush() removalVasily Averin2021-07-023-21/+0
* netfilter: nf_tables: Fix dereference of null pointer flowColin Ian King2021-07-021-1/+2
* netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT stateFlorian Westphal2021-07-021-0/+10
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-295-52/+64
|\
| * netfilter: nf_tables: do not allow to delete table with owner by handlePablo Neira Ayuso2021-06-221-3/+9
| * netfilter: nf_tables: skip netlink portID validation if zeroPablo Neira Ayuso2021-06-221-1/+1
| * netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer...Pablo Neira Ayuso2021-06-211-10/+7
| * netfilter: nf_tables: memleak in hw offload abort pathPablo Neira Ayuso2021-06-212-37/+31
| * netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso2021-06-161-1/+8
| * netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso2021-06-161-0/+5
| * netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso2021-06-161-0/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-06-2312-40/+132
|\ \
| * | netfilter: nfnetlink_hook: fix check for snprintf() overflowDan Carpenter2021-06-211-1/+3
| * | netfilter: conntrack: pass hook state to log functionsFlorian Westphal2021-06-187-36/+35
| * | netfilter: nf_tables: add last expressionPablo Neira Ayuso2021-06-173-1/+89
| * | netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter2021-06-161-1/+1
| * | netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter2021-06-161-1/+4
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-182-42/+48
|\ \ \ | |/ / |/| / | |/
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2021-06-101-42/+43
| |\
| | * netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso2021-06-091-42/+43
| * | netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy2021-06-101-0/+5
| |/
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-06-0920-203/+615
|\ \
| * | netfilter: nf_tables: move base hook annotation to init helperFlorian Westphal2021-06-091-8/+7
| * | netfilter: nfnetlink_hook: add depends-on nftablesFlorian Westphal2021-06-091-0/+1
| * | netfilter: nfnetlink_hook: fix array index out-of-bounds errorColin Ian King2021-06-091-1/+1
| * | netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter2021-06-091-1/+3
| * | netfilter: add new hook nfnl subsystemFlorian Westphal2021-06-074-0/+386
| * | netfilter: annotate nf_tables base hook opsFlorian Westphal2021-06-071-1/+3
| * | netfilter: flowtable: Set offload timeouts according to proto valuesOz Shlomo2021-06-072-12/+39
| * | netfilter: conntrack: Introduce udp offload timeout configurationOz Shlomo2021-06-072-0/+27
| * | netfilter: conntrack: Introduce tcp offload timeout configurationOz Shlomo2021-06-072-0/+29
| * | netfilter: nftables: add nf_ct_pernet() helper functionPablo Neira Ayuso2021-06-076-38/+24
| * | netfilter: nf_tables: remove nft_ctx_init_from_setattr()Pablo Neira Ayuso2021-06-071-39/+25
| * | netfilter: nf_tables: remove nft_ctx_init_from_elemattr()Pablo Neira Ayuso2021-06-071-38/+34
| * | netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use itPablo Neira Ayuso2021-06-076-70/+41
* | | Merge ra.kernel.org:/pub/scm/linux/kernel/git/netdev/netDavid S. Miller2021-06-075-32/+66
|\ \ \ | |/ / |/| / | |/
| * netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatchesPablo Neira Ayuso2021-06-021-2/+6
| * netfilter: nft_ct: skip expectations for confirmed conntrackPablo Neira Ayuso2021-06-021-1/+1
| * ipvs: ignore IP_VS_SVC_F_HASHED flag when adding serviceJulian Anastasov2021-05-271-1/+1
| * netfilter: nf_tables: fix table flag updatesPablo Neira Ayuso2021-05-241-19/+40
| * netfilter: nf_tables: extended netlink error reporting for chain typePablo Neira Ayuso2021-05-211-7/+14
| * netfilter: nf_tables: missing error reporting for not selected expressionsPablo Neira Ayuso2021-05-211-1/+3
| * netfilter: conntrack: unregister ipv4 sockopts on error unwindFlorian Westphal2021-05-201-1/+1