summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nft_fib: allow from forward/input without iif selectorEric Garver2024-05-291-5/+3
* netfilter: nft_payload: skbuff vlan metadata mangle supportPablo Neira Ayuso2024-05-291-7/+65
* netfilter: nft_payload: restore vlan q-in-q match supportPablo Neira Ayuso2024-05-201-16/+7
* netfilter: ipset: Add list flush to cancel_gcAlexander Maltsev2024-05-201-0/+3
* netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()Eric Dumazet2024-05-201-0/+2
* Merge tag 'nf-next-24-05-12' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2024-05-1313-169/+157
|\
| * netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal2024-05-107-19/+21
| * netfilter: nft_set_pipapo: remove dirty flagFlorian Westphal2024-05-102-27/+0
| * netfilter: nft_set_pipapo: move cloning of match info to insert/removal pathFlorian Westphal2024-05-101-21/+49
| * netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand cloneFlorian Westphal2024-05-101-7/+10
| * netfilter: nft_set_pipapo: merge deactivate helper into callerFlorian Westphal2024-05-061-30/+9
| * netfilter: nft_set_pipapo: prepare walk function for on-demand cloneFlorian Westphal2024-05-061-21/+39
| * netfilter: nft_set_pipapo: prepare destroy function for on-demand cloneFlorian Westphal2024-05-061-21/+6
| * netfilter: nft_set_pipapo: make pipapo_clone helper return NULLFlorian Westphal2024-05-061-7/+7
| * netfilter: nft_set_pipapo: move prove_locking helper aroundFlorian Westphal2024-05-061-11/+11
| * netfilter: conntrack: remove flowtable early-drop testFlorian Westphal2024-05-061-2/+0
| * netfilter: use NF_DROP instead of -NF_DROPJason Xing2024-05-061-1/+1
| * netfilter: conntrack: dccp: try not to drop skb in conntrackJason Xing2024-05-061-2/+2
| * netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router DiscoveryLinus Lüssing2024-05-061-1/+3
| * netfilter: nf_tables: remove NETDEV_CHANGENAME from netdev chain event handlerPablo Neira Ayuso2024-05-061-5/+1
| * netfilter: nf_tables: skip transaction if update object is not implementedPablo Neira Ayuso2024-05-061-2/+6
* | ipvs: allow some sysctls in non-init user namespacesAlexander Mikhalitsyn2024-05-081-4/+15
* | ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthreshAlexander Mikhalitsyn2024-05-081-7/+7
|/
* netfilter: Remove the now superfluous sentinel elements from ctl_table arrayJoel Granados2024-05-035-19/+5
* inet: introduce dst_rtable() helperEric Dumazet2024-04-303-4/+4
* ipv6: introduce dst_rt6_info() helperEric Dumazet2024-04-294-16/+12
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-04-252-3/+7
|\
| * netfilter: nf_tables: honor table dormant flag from netdev release event pathPablo Neira Ayuso2024-04-251-1/+3
| * ipvs: Fix checksumming on GSO of SCTP packetsIsmael Luceno2024-04-251-2/+4
* | netfilter: nfnetlink: Handle ACK flags for batch messagesDonald Hunter2024-04-221-0/+5
* | sysctl: treewide: constify ctl_table_header::ctl_table_argThomas Weißschuh2024-04-222-2/+2
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-04-188-38/+99
|\|
| * netfilter: nf_tables: fix memleak in map from abort pathPablo Neira Ayuso2024-04-181-2/+14
| * netfilter: nf_tables: restore set elements when delete set failsPablo Neira Ayuso2024-04-175-20/+45
| * netfilter: nf_tables: missing iterator type in lookup walkPablo Neira Ayuso2024-04-172-1/+3
| * netfilter: flowtable: incorrect pppoe tuplePablo Neira Ayuso2024-04-111-1/+1
| * netfilter: flowtable: validate pppoe headerPablo Neira Ayuso2024-04-112-4/+7
| * netfilter: nft_set_pipapo: do not free live elementFlorian Westphal2024-04-111-5/+9
| * netfilter: nft_set_pipapo: walk over current view on netlink dumpPablo Neira Ayuso2024-04-112-2/+9
| * netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()Ziyang Xuan2024-04-111-2/+6
| * netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()Ziyang Xuan2024-04-111-2/+6
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-04-041-16/+34
|\|
| * netfilter: nf_tables: discard table flag update with pending basechain deletionPablo Neira Ayuso2024-04-041-4/+5
| * netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()Ziyang Xuan2024-04-041-2/+7
| * netfilter: nf_tables: reject new basechain after table flag updatePablo Neira Ayuso2024-04-041-0/+3
| * netfilter: nf_tables: flush pending destroy work before exit_net releasePablo Neira Ayuso2024-04-041-0/+1
| * netfilter: nf_tables: release mutex after nft_gc_seq_end from abort pathPablo Neira Ayuso2024-04-041-5/+8
| * netfilter: nf_tables: release batch on table validation from abort pathPablo Neira Ayuso2024-04-041-5/+10
* | ip_tunnel: convert __be16 tunnel flags to bitmapsAlexander Lobakin2024-04-013-30/+40
|/
* netfilter: nf_tables: skip netdev hook unregistration if table is dormantPablo Neira Ayuso2024-03-281-6/+10