summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: do not update stateful expressions if lookup is invertedPablo Neira Ayuso2020-04-052-6/+7
* netfilter: nft_set_rbtree: Drop spurious condition for overlap detection on i...Stefano Brivio2020-04-051-12/+11
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2020-03-3013-189/+235
|\
| * ipvs: fix uninitialized variable warningHaishuang Yan2020-03-301-2/+1
| * netfilter: nft_exthdr: fix endianness of tcp option castSergey Marinkevich2020-03-301-5/+3
| * netfilter: flowtable: add counter support in HW offloadwenxu2020-03-301-0/+12
| * netfilter: conntrack: add nf_ct_acct_add()wenxu2020-03-301-3/+4
| * netfilter: nf_tables: skip set types that do not support for expressionsPablo Neira Ayuso2020-03-302-0/+5
| * netfilter: nft_dynset: validate set expression definitionPablo Neira Ayuso2020-03-301-2/+7
| * netfilter: nft_set_bitmap: initialize set element extension in lookupsPablo Neira Ayuso2020-03-301-0/+1
| * netfilter: ctnetlink: be more strict when NF_CONNTRACK_MARK is not setRomain Bellan2020-03-301-1/+1
| * netfilter: nf_queue: prefer nf_queue_entry_freeFlorian Westphal2020-03-291-18/+9
| * netfilter: nf_queue: do not release refcouts until nf_reinject is doneFlorian Westphal2020-03-291-4/+2
| * netfilter: nf_queue: place bridge physports into queue_entry structFlorian Westphal2020-03-291-30/+23
| * netfilter: nf_queue: make nf_queue_entry_release_refs staticFlorian Westphal2020-03-292-10/+10
| * netfilter: flowtable: Use work entry per offload commandPaul Blakey2020-03-271-31/+15
| * netfilter: flowtable: Use rw sem as flow block lockPaul Blakey2020-03-272-8/+7
| * netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup()Qian Cai2020-03-271-1/+2
| * netfilter: flowtable: Fix incorrect tc_setup_type typewenxu2020-03-272-2/+2
| * netfilter: flowtable: add counter supportPablo Neira Ayuso2020-03-271-0/+7
| * netfilter: nf_tables: add enum nft_flowtable_flags to uapiPablo Neira Ayuso2020-03-271-1/+1
| * netfilter: conntrack: export nf_ct_acct_update()Pablo Neira Ayuso2020-03-271-8/+7
| * ipvs: optimize tunnel dumps for icmp errorsHaishuang Yan2020-03-271-20/+26
| * netfilter: conntrack: Add missing annotations for nf_conntrack_all_lock() and...Jules Irenge2020-03-271-0/+2
| * netfilter: ctnetlink: Add missing annotation for ctnetlink_parse_nat_setup()Jules Irenge2020-03-271-0/+1
| * netfilter: flowtable: fix NULL pointer dereference in tunnel offload supportwenxu2020-03-191-3/+3
| * netfilter: nf_tables: add nft_set_elem_expr_destroy() and use itPablo Neira Ayuso2020-03-191-11/+17
| * netfilter: nf_tables: fix double-free on set expression from the error pathPablo Neira Ayuso2020-03-191-0/+1
| * netfilter: nf_tables: allow to specify stateful expression in set definitionPablo Neira Ayuso2020-03-191-12/+48
| * netfilter: nf_tables: pass context to nft_set_destroy()Pablo Neira Ayuso2020-03-191-5/+5
| * netfilter: nf_tables: move nft_expr_clone() to nf_tables_api.cPablo Neira Ayuso2020-03-192-17/+18
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller2020-03-257-20/+136
|\ \ | |/ |/|
| * net: Fix CONFIG_NET_CLS_ACT=n and CONFIG_NFT_FWD_NETDEV={y, m} buildPablo Neira Ayuso2020-03-251-3/+2
| * netfilter: nft_fwd_netdev: allow to redirect to ifb via ingressPablo Neira Ayuso2020-03-241-0/+4
| * netfilter: nft_fwd_netdev: validate family and chain typePablo Neira Ayuso2020-03-241-0/+9
| * netfilter: nft_set_rbtree: Detect partial overlaps on insertionStefano Brivio2020-03-241-3/+67
| * netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()Stefano Brivio2020-03-241-6/+11
| * netfilter: nft_set_pipapo: Separate partial and complete overlap cases on ins...Stefano Brivio2020-03-241-7/+27
| * netfilter: nf_tables: Allow set back-ends to report partial overlaps on inser...Pablo Neira Ayuso2020-03-241-0/+5
| * netfilter: flowtable: populate addr_type maskEdward Cree2020-03-191-0/+1
| * netfilter: flowtable: Fix flushing of offloaded flows on freePaul Blakey2020-03-191-0/+3
| * netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}Haishuang Yan2020-03-191-0/+2
| * netfilter: flowtable: reload ip{v6}h in nf_flow_nat_ip{v6}Haishuang Yan2020-03-191-4/+8
* | netfilter: revert introduction of egress hookDaniel Borkmann2020-03-183-31/+5
* | netfilter: Introduce egress hookLukas Wunner2020-03-183-5/+31
* | netfilter: conntrack: re-visit sysctls in unprivileged namespacesFlorian Westphal2020-03-151-11/+8
* | netfilter: nft_lookup: update element stateful expressionPablo Neira Ayuso2020-03-151-0/+1
* | netfilter: nf_tables: add nft_set_elem_update_expr() helper functionPablo Neira Ayuso2020-03-151-7/+1
* | netfilter: nf_tables: add elements with stateful expressionsPablo Neira Ayuso2020-03-151-1/+20
* | netfilter: nf_tables: statify nft_expr_init()Pablo Neira Ayuso2020-03-151-2/+2