summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: set element extended ACK reporting supportPablo Neira Ayuso2022-05-271-3/+9
* netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exitFlorian Westphal2022-05-271-2/+3
* netfilter: nfnetlink: fix warn in nfnetlink_unbindFlorian Westphal2022-05-271-19/+5
* netfilter: nft_limit: Clone packet limits' cost valuePhil Sutter2022-05-261-0/+2
* netfilter: nf_tables: disallow non-stateful expression in sets earlierPablo Neira Ayuso2022-05-261-9/+10
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski2022-05-193-48/+17
|\
| * netfilter: ctnetlink: fix up for "netfilter: conntrack: remove unconfirmed list"Stephen Rothwell2022-05-181-0/+2
| * netfilter: conntrack: remove pr_debug callsites from tcp trackerFlorian Westphal2022-05-161-48/+4
| * netfilter: nf_conncount: reduce unnecessary GCWilliam Tu2022-05-161-0/+11
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2022-05-194-70/+48
|\ \ | |/ |/|
| * netfilter: nf_tables: disable expression reduction infraPablo Neira Ayuso2022-05-181-10/+1
| * netfilter: flowtable: move dst_check to packet pathRitaro Takenaka2022-05-182-22/+20
| * netfilter: flowtable: fix TCP flow teardownPablo Neira Ayuso2022-05-182-27/+9
| * netfilter: nft_flow_offload: fix offload with pppoe + vlanFelix Fietkau2022-05-161-1/+2
| * netfilter: nft_flow_offload: skip dst neigh lookup for ppp devicesFelix Fietkau2022-05-161-9/+13
| * netfilter: flowtable: fix excessive hw offload attempts after failureFelix Fietkau2022-05-161-1/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller2022-05-1612-300/+411
|\ \
| * | netfilter: flowtable: nft_flow_route use more data for reverse routeSven Auhagen2022-05-131-0/+8
| * | netfilter: conntrack: add nf_conntrack_events autodetect modeFlorian Westphal2022-05-133-8/+24
| * | netfilter: conntrack: un-inline nf_ct_ecache_ext_addFlorian Westphal2022-05-132-3/+33
| * | netfilter: nfnetlink: allow to detect if ctnetlink listeners existFlorian Westphal2022-05-131-3/+37
| * | netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*()Pablo Neira Ayuso2022-05-135-41/+47
| * | netfilter: conntrack: avoid unconditional local_bh_disableFlorian Westphal2022-05-131-5/+2
| * | netfilter: conntrack: remove unconfirmed listFlorian Westphal2022-05-132-98/+3
| * | netfilter: conntrack: remove __nf_ct_unconfirmed_destroyFlorian Westphal2022-05-133-39/+13
| * | netfilter: cttimeout: decouple unlink and free on netns destructionFlorian Westphal2022-05-131-0/+12
| * | netfilter: extensions: introduce extension genid countFlorian Westphal2022-05-132-1/+86
| * | netfilter: remove nf_ct_unconfirmed_destroy helperFlorian Westphal2022-05-132-15/+3
| * | netfilter: cttimeout: decouple unlink and free on netns destructionFlorian Westphal2022-05-131-2/+28
| * | netfilter: conntrack: remove the percpu dying listFlorian Westphal2022-05-133-46/+13
| * | netfilter: conntrack: include ecache dying list in dumpsFlorian Westphal2022-05-132-0/+53
| * | netfilter: ecache: use dedicated list for event redeliveryFlorian Westphal2022-05-132-70/+80
* | | net: sysctl: introduce sysctl SYSCTL_THREETonghao Zhang2022-05-031-3/+1
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2022-04-285-32/+51
|\ \ \ | |/ / |/| / | |/
| * netfilter: nft_socket: only do sk lookups when indev is availableFlorian Westphal2022-04-281-14/+38
| * netfilter: conntrack: fix udp offload timeout sysctlVolodymyr Mytnyk2022-04-271-1/+1
| * netfilter: nf_conntrack_tcp: re-init for syn packets onlyFlorian Westphal2022-04-271-15/+6
| * netfilter: nft_set_rbtree: overlap detection with element re-addition after d...Pablo Neira Ayuso2022-04-221-1/+5
| * ipvs: correctly print the memory size of ip_vs_conn_tabPengcheng Yang2022-04-191-1/+1
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni2022-04-152-5/+4
|\|
| * netfilter: nf_tables: nft_parse_register can return a negative valueAntoine Tenart2022-04-121-1/+1
| * netfilter: nft_socket: make cgroup match work in input tooFlorian Westphal2022-04-111-4/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller2022-04-117-125/+135
|\ \
| * | netfilter: nft_fib: reverse path filter for policy-based routing on iifPablo Neira Ayuso2022-04-111-0/+4
| * | netfilter: bitwise: improve error goto labelsJeremy Sowden2022-04-091-5/+6
| * | netfilter: bitwise: replace hard-coded size with `sizeof` expressionJeremy Sowden2022-04-091-1/+1
| * | netfilter: nf_log_syslog: Consolidate entry checksPhil Sutter2022-04-081-8/+10
| * | netfilter: nf_log_syslog: Don't ignore unknown protocolsPhil Sutter2022-04-081-0/+31
| * | netfilter: nf_log_syslog: Merge MAC header dumpersPhil Sutter2022-04-081-66/+25
| * | netfilter: cttimeout: inc/dec module refcount per object, not per use refcountFlorian Westphal2022-04-081-9/+5