summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: conntrack: sanitize table size default settingsFlorian Westphal2021-08-301-16/+14
* netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutexPavel Skripkin2021-08-111-1/+8
* netfilter: nfnetlink_hook: translate inet ingress to netdevPablo Neira Ayuso2021-08-061-1/+7
* netfilter: conntrack: remove offload_pickup sysctl againFlorian Westphal2021-08-064-21/+8
* netfilter: nfnetlink_hook: Use same family as request messagePablo Neira Ayuso2021-08-061-3/+3
* netfilter: nfnetlink_hook: use the sequence number of the request messagePablo Neira Ayuso2021-08-061-1/+2
* netfilter: nfnetlink_hook: missing chain familyPablo Neira Ayuso2021-08-061-2/+6
* netfilter: nfnetlink_hook: strip off module name from hookfnPablo Neira Ayuso2021-08-061-0/+1
* netfilter: conntrack: collect all entries in one cycleFlorian Westphal2021-08-061-49/+22
* netfilter: ipset: Limit the maximal range of consecutive elements to add/deleteJozsef Kadlecsik2021-08-0410-7/+85
* netfilter: nfnl_hook: fix unused variable warningArnd Bergmann2021-07-231-0/+2
* netfilter: nft_nat: allow to specify layer 4 protocol NAT onlyPablo Neira Ayuso2021-07-231-1/+3
* netfilter: conntrack: adjust stop timestamp to real expiry valueFlorian Westphal2021-07-231-1/+6
* netfilter: nft_last: avoid possible false sharingPablo Neira Ayuso2021-07-231-7/+13
* netfilter: flowtable: avoid possible false sharingPablo Neira Ayuso2021-07-231-1/+5
* netfilter: nf_tables: fix audit memory leak in nf_tables_commitDongliang Mu2021-07-171-0/+12
* netfilter: nft_last: incorrect arithmetics when restoring last usedPablo Neira Ayuso2021-07-061-1/+1
* netfilter: nft_last: honor NFTA_LAST_SET on restorationPablo Neira Ayuso2021-07-061-2/+8
* netfilter: conntrack: Mark access for KCSANManfred Spraul2021-07-061-1/+9
* netfilter: conntrack: add new sysctl to disable RST checkAli Abdallah2021-07-062-1/+15
* netfilter: conntrack: improve RST handling when tuple is re-usedAli Abdallah2021-07-061-17/+36
* netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin2021-07-021-0/+3
* netfilter: conntrack: nf_ct_gre_keymap_flush() removalVasily Averin2021-07-023-21/+0
* netfilter: nf_tables: Fix dereference of null pointer flowColin Ian King2021-07-021-1/+2
* netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT stateFlorian Westphal2021-07-021-0/+10
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-295-52/+64
|\
| * netfilter: nf_tables: do not allow to delete table with owner by handlePablo Neira Ayuso2021-06-221-3/+9
| * netfilter: nf_tables: skip netlink portID validation if zeroPablo Neira Ayuso2021-06-221-1/+1
| * netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer...Pablo Neira Ayuso2021-06-211-10/+7
| * netfilter: nf_tables: memleak in hw offload abort pathPablo Neira Ayuso2021-06-212-37/+31
| * netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso2021-06-161-1/+8
| * netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso2021-06-161-0/+5
| * netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso2021-06-161-0/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-06-2312-40/+132
|\ \
| * | netfilter: nfnetlink_hook: fix check for snprintf() overflowDan Carpenter2021-06-211-1/+3
| * | netfilter: conntrack: pass hook state to log functionsFlorian Westphal2021-06-187-36/+35
| * | netfilter: nf_tables: add last expressionPablo Neira Ayuso2021-06-173-1/+89
| * | netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter2021-06-161-1/+1
| * | netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter2021-06-161-1/+4
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-182-42/+48
|\ \ \ | |/ / |/| / | |/
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2021-06-101-42/+43
| |\
| | * netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso2021-06-091-42/+43
| * | netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy2021-06-101-0/+5
| |/
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-06-0920-203/+615
|\ \
| * | netfilter: nf_tables: move base hook annotation to init helperFlorian Westphal2021-06-091-8/+7
| * | netfilter: nfnetlink_hook: add depends-on nftablesFlorian Westphal2021-06-091-0/+1
| * | netfilter: nfnetlink_hook: fix array index out-of-bounds errorColin Ian King2021-06-091-1/+1
| * | netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter2021-06-091-1/+3
| * | netfilter: add new hook nfnl subsystemFlorian Westphal2021-06-074-0/+386
| * | netfilter: annotate nf_tables base hook opsFlorian Westphal2021-06-071-1/+3