summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
...
| * | netfilter: ctnetlink: add and use a helper for mark parsingFlorian Westphal2021-08-051-15/+27
| * | netfilter: remove xt pernet dataFlorian Westphal2021-08-011-11/+0
| * | netfilter: flowtable: remove nf_ct_l4proto_find() callPablo Neira Ayuso2021-08-011-10/+0
| * | netfilter: nft_compat: use nfnetlink_unicast()Pablo Neira Ayuso2021-08-011-5/+3
* | | net: Remove redundant if statementsYajun Deng2021-08-052-18/+9
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-07-316-10/+41
|\ \ \ | |/ / |/| / | |/
| * netfilter: nfnl_hook: fix unused variable warningArnd Bergmann2021-07-231-0/+2
| * netfilter: nft_nat: allow to specify layer 4 protocol NAT onlyPablo Neira Ayuso2021-07-231-1/+3
| * netfilter: conntrack: adjust stop timestamp to real expiry valueFlorian Westphal2021-07-231-1/+6
| * netfilter: nft_last: avoid possible false sharingPablo Neira Ayuso2021-07-231-7/+13
| * netfilter: flowtable: avoid possible false sharingPablo Neira Ayuso2021-07-231-1/+5
| * netfilter: nf_tables: fix audit memory leak in nf_tables_commitDongliang Mu2021-07-171-0/+12
* | net: ipv6: introduce ip6_dst_mtu_maybe_forwardVadim Fedorenko2021-07-211-1/+1
|/
* netfilter: nft_last: incorrect arithmetics when restoring last usedPablo Neira Ayuso2021-07-061-1/+1
* netfilter: nft_last: honor NFTA_LAST_SET on restorationPablo Neira Ayuso2021-07-061-2/+8
* netfilter: conntrack: Mark access for KCSANManfred Spraul2021-07-061-1/+9
* netfilter: conntrack: add new sysctl to disable RST checkAli Abdallah2021-07-062-1/+15
* netfilter: conntrack: improve RST handling when tuple is re-usedAli Abdallah2021-07-061-17/+36
* netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin2021-07-021-0/+3
* netfilter: conntrack: nf_ct_gre_keymap_flush() removalVasily Averin2021-07-023-21/+0
* netfilter: nf_tables: Fix dereference of null pointer flowColin Ian King2021-07-021-1/+2
* netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT stateFlorian Westphal2021-07-021-0/+10
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-295-52/+64
|\
| * netfilter: nf_tables: do not allow to delete table with owner by handlePablo Neira Ayuso2021-06-221-3/+9
| * netfilter: nf_tables: skip netlink portID validation if zeroPablo Neira Ayuso2021-06-221-1/+1
| * netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer...Pablo Neira Ayuso2021-06-211-10/+7
| * netfilter: nf_tables: memleak in hw offload abort pathPablo Neira Ayuso2021-06-212-37/+31
| * netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso2021-06-161-1/+8
| * netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso2021-06-161-0/+5
| * netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso2021-06-161-0/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-06-2312-40/+132
|\ \
| * | netfilter: nfnetlink_hook: fix check for snprintf() overflowDan Carpenter2021-06-211-1/+3
| * | netfilter: conntrack: pass hook state to log functionsFlorian Westphal2021-06-187-36/+35
| * | netfilter: nf_tables: add last expressionPablo Neira Ayuso2021-06-173-1/+89
| * | netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter2021-06-161-1/+1
| * | netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter2021-06-161-1/+4
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-182-42/+48
|\ \ \ | |/ / |/| / | |/
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2021-06-101-42/+43
| |\
| | * netfilter: nf_tables: initialize set before expression setupPablo Neira Ayuso2021-06-091-42/+43
| * | netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy2021-06-101-0/+5
| |/
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-06-0920-203/+615
|\ \
| * | netfilter: nf_tables: move base hook annotation to init helperFlorian Westphal2021-06-091-8/+7
| * | netfilter: nfnetlink_hook: add depends-on nftablesFlorian Westphal2021-06-091-0/+1
| * | netfilter: nfnetlink_hook: fix array index out-of-bounds errorColin Ian King2021-06-091-1/+1
| * | netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter2021-06-091-1/+3
| * | netfilter: add new hook nfnl subsystemFlorian Westphal2021-06-074-0/+386
| * | netfilter: annotate nf_tables base hook opsFlorian Westphal2021-06-071-1/+3
| * | netfilter: flowtable: Set offload timeouts according to proto valuesOz Shlomo2021-06-072-12/+39
| * | netfilter: conntrack: Introduce udp offload timeout configurationOz Shlomo2021-06-072-0/+27
| * | netfilter: conntrack: Introduce tcp offload timeout configurationOz Shlomo2021-06-072-0/+29