summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2023-02-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski8-23/+30
2023-02-22netfilter: ctnetlink: make event listener tracking globalFlorian Westphal3-5/+9
2023-02-22netfilter: xt_length: use skb len to match in length_mt6Xin Long1-2/+1
2023-02-22netfilter: conntrack: fix rmmod double-free raceFlorian Westphal3-14/+15
2023-02-22netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()Hangyu Hua1-1/+4
2023-02-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller7-11/+73
2023-02-17netfilter: let reset rules clean out conntrack entriesFlorian Westphal3-0/+63
2023-02-10Daniel Borkmann says:Jakub Kicinski2-13/+13
2023-02-10net: extract nf_ct_handle_fragments to nf_conntrack_ovsXin Long1-0/+48
2023-02-10net: extract nf_ct_skb_network_trim function to nf_conntrack_ovsXin Long1-0/+26
2023-02-10net: create nf_conntrack_ovs for ovs and tc useXin Long4-98/+108
2023-02-09netfilter: nf_tables: allow to fetch set elements when table has an ownerPablo Neira Ayuso1-1/+1
2023-02-03netfilter: nf_conntrack: allow early drop of offloaded UDP connsVlad Buslov1-5/+6
2023-02-03netfilter: flowtable: cache info of last offloadVlad Buslov2-4/+4
2023-02-03netfilter: flowtable: allow unidirectional rulesVlad Buslov1-4/+8
2023-02-03netfilter: flowtable: fixup UDP timeout depending on ct stateVlad Buslov1-1/+4
2023-02-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+3
2023-02-02ipvs: avoid kfree_rcu without 2nd argJulian Anastasov1-1/+1
2023-02-01netfilter: use skb_ip_totlen and iph_totlenXin Long3-3/+3
2023-02-02bpf: Add __bpf_kfunc tag to all kfuncsDavid Vernet2-13/+13
2023-02-01netfilter: conntrack: remote a return value of the 'seq_print_acct' function.Gavrilov Ilia1-8/+4
2023-02-01netfilter: conntrack: udp: fix seen-reply testFlorian Westphal1-1/+1
2023-02-01netfilter: nf_tables: fix wrong pointer passed to PTR_ERR()Yang Yingliang1-1/+1
2023-02-01netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()Alok Tiwari1-0/+3
2023-01-31Revert "netfilter: conntrack: fix bug in for_each_sctp_chunk"Florian Westphal1-2/+3
2023-01-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-242/+278
2023-01-25net: Kconfig: fix spellosRandy Dunlap1-1/+1
2023-01-24netlink: fix spelling mistake in dump size assertJakub Kicinski1-1/+1
2023-01-24netfilter: conntrack: unify established states for SCTP pathsSriram Yagnaraman2-62/+39
2023-01-24Revert "netfilter: conntrack: add sctp DATA_SENT state"Sriram Yagnaraman2-68/+42
2023-01-24netfilter: conntrack: fix bug in for_each_sctp_chunkSriram Yagnaraman1-2/+2
2023-01-24netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETESriram Yagnaraman1-9/+16
2023-01-23netfilter: nft_set_rbtree: skip elements in transaction from garbage collectionPablo Neira Ayuso1-1/+15
2023-01-23netfilter: nft_set_rbtree: Switch to node list walk for overlap detectionPablo Neira Ayuso1-127/+189
2023-01-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-3/+18
2023-01-18netfilter: nf_tables: add support to destroy operationFernando Fernandez Mancera1-8/+103
2023-01-18netfilter: nf_tables: avoid retpoline overhead for some ct expression callsFlorian Westphal4-12/+92
2023-01-18netfilter: nf_tables: avoid retpoline overhead for objref callsFlorian Westphal2-6/+8
2023-01-18netfilter: nf_tables: add static key to skip retpoline workaroundsFlorian Westphal1-1/+29
2023-01-18netfilter: conntrack: move rcu read lock to nf_conntrack_find_getFlorian Westphal1-8/+9
2023-01-18netfilter: conntrack: avoid reload of ct->statusFlorian Westphal2-8/+11
2023-01-18netfilter: conntrack: remove pr_debug callsFlorian Westphal3-44/+5
2023-01-18netfilter: conntrack: sctp: use nf log infrastructure for invalid packetsFlorian Westphal1-31/+15
2023-01-17netfilter: conntrack: handle tcp challenge acks during connection reuseFlorian Westphal1-0/+15
2023-01-11netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bitsPablo Neira Ayuso1-1/+1
2023-01-11netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.Gavrilov Ilia1-2/+2
2023-01-05netlink: add macro for checking dump ctx sizeJakub Kicinski1-1/+1
2023-01-05Merge tag 'net-6.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds13-187/+268
2023-01-02netfilter: ipset: Rework long task execution when adding/deleting entriesJozsef Kadlecsik10-80/+67
2023-01-02netfilter: ipset: fix hash:net,port,net hang with /0 subnetJozsef Kadlecsik1-19/+21