summaryrefslogtreecommitdiff
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nftables: avoid potential overflows on 32bit archesEric Dumazet2021-05-072-7/+10
* netfilter: nftables: avoid overflows in nft_hash_buckets()Eric Dumazet2021-05-071-1/+9
* netfilter: nftables: Fix a memleak from userdata error path in new objectsPablo Neira Ayuso2021-05-051-2/+2
* netfilter: remove BUG_ON() after skb_header_pointer()Pablo Neira Ayuso2021-05-056-7/+21
* netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL checkPablo Neira Ayuso2021-05-051-0/+2
* netfilter: nfnetlink: add a missing rcu_read_unlock()Eric Dumazet2021-05-051-0/+1
* netfilter: xt_SECMARK: add new revision to fix structure layoutPablo Neira Ayuso2021-05-031-19/+69
* netfilter: nft_socket: fix build with CONFIG_SOCK_CGROUP_DATA=nArnd Bergmann2021-04-271-2/+2
* netfilter: nft_socket: fix an unused variable warningArnd Bergmann2021-04-271-2/+5
* netfilter: nftables: add catch-all set element supportPablo Neira Ayuso2021-04-276-63/+458
* netfilter: nftables: add helper function to validate set element dataPablo Neira Ayuso2021-04-271-4/+11
* netfilter: nftables: add helper function to flush set elementsPablo Neira Ayuso2021-04-271-13/+18
* netfilter: nftables: add loop check helper functionPablo Neira Ayuso2021-04-271-9/+21
* netfilter: nftables: rename set element data activation/deactivation functionsPablo Neira Ayuso2021-04-271-11/+11
* netfilter: allow to turn off xtables compat layerFlorian Westphal2021-04-263-11/+21
* netfilter: nfnetlink: consolidate callback typesPablo Neira Ayuso2021-04-2611-118/+261
* netfilter: nfnetlink: pass struct nfnl_info to batch callbacksPablo Neira Ayuso2021-04-262-172/+180
* netfilter: nfnetlink: pass struct nfnl_info to rcu callbacksPablo Neira Ayuso2021-04-264-116/+105
* netfilter: nfnetlink: add struct nfnl_info and pass it to callbacksPablo Neira Ayuso2021-04-269-336/+277
* netfilter: nftables: add nft_pernet() helper functionPablo Neira Ayuso2021-04-264-71/+61
* netfilter: nf_log_syslog: Unset bridge logger in pernet exitPhil Sutter2021-04-261-0/+1
* netfilter: ip_tables: pass table pointer via nf_hook_opsFlorian Westphal2021-04-261-0/+1
* netfilter: x_tables: add xt_find_tableFlorian Westphal2021-04-261-0/+17
* netfilter: disable defrag once its no longer neededFlorian Westphal2021-04-264-2/+57
* netfilter: nft_socket: add support for cgroupsv2Pablo Neira Ayuso2021-04-261-1/+47
* netfilter: nat: move nf_xfrm_me_harder to where it is usedFlorian Westphal2021-04-262-37/+38
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2021-04-1913-88/+329
|\
| * netfilter: nftables: counter hardware offload supportPablo Neira Ayuso2021-04-183-7/+69
| * netfilter: nftables_offload: special ethertype handling for VLANPablo Neira Ayuso2021-04-181-0/+44
| * netfilter: nftables_offload: VLAN id needs host byteorder in flow dissectorPablo Neira Ayuso2021-04-182-6/+45
| * netfilter: nft_payload: fix C-VLAN offload supportPablo Neira Ayuso2021-04-181-2/+3
| * netfilter: flowtable: Add FLOW_OFFLOAD_XMIT_UNSPEC xmit typeRoi Dayan2021-04-131-0/+3
| * netfilter: conntrack: convert sysctls to u8Florian Westphal2021-04-132-41/+35
| * netfilter: conntrack: move ct counter to net_generic dataFlorian Westphal2021-04-133-17/+45
| * netfilter: conntrack: move expect counter to net_generic dataFlorian Westphal2021-04-132-7/+21
| * netfilter: conntrack: move autoassign_helper sysctl to net_generic dataFlorian Westphal2021-04-132-6/+7
| * netfilter: conntrack: move autoassign warning member to net_generic dataFlorian Westphal2021-04-131-3/+6
| * netfilter: flowtable: add vlan pop action offload supportwenxu2021-04-131-0/+15
| * netfilter: flowtable: add vlan match offload supportwenxu2021-04-131-0/+37
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-04-175-25/+42
|\ \ | |/ |/|
| * netfilter: nftables: clone set element expression templatePablo Neira Ayuso2021-04-131-12/+34
| * netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2021-04-131-8/+2
| * netfilter: nft_limit: avoid possible divide error in nft_limit_initEric Dumazet2021-04-101-2/+2
| * netfilter: conntrack: do not print icmpv6 as unknown via /procPablo Neira Ayuso2021-03-311-0/+1
| * netfilter: flowtable: fix NAT IPv6 offload manglingPablo Neira Ayuso2021-03-311-3/+3
* | netfilter: conntrack: Make global sysctls readonly in non-init netnsJonathon Reinhart2021-04-121-8/+2
* | netfilter: conntrack: move ecache dwork to net_generic infraFlorian Westphal2021-04-062-7/+31
* | netfilter: conntrack: move sysctl pointer to net_generic infraFlorian Westphal2021-04-061-4/+6
* | netfilter: x_tables: move known table lists to net_generic infraFlorian Westphal2021-04-061-13/+33
* | netfilter: nf_tables: use net_generic infra for transaction dataFlorian Westphal2021-04-064-128/+232