summaryrefslogtreecommitdiffstats
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2022-08-09netfilter: nf_tables: disallow jump to implicit chain from set elementPablo Neira Ayuso1-0/+5
2022-08-09netfilter: nf_tables: upfront validation of data via nft_data_init()Pablo Neira Ayuso1-2/+2
2022-08-09netfilter: nf_tables: validate variable length element extensionPablo Neira Ayuso1-1/+3
2022-07-22Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-0/+19
2022-07-21net: netfilter: Add kfuncs to set and change CT statusLorenzo Bianconi1-0/+2
2022-07-21net: netfilter: Add kfuncs to set and change CT timeoutKumar Kartikeya Dwivedi1-0/+2
2022-07-21net: netfilter: Add kfuncs to allocate and insert CTLorenzo Bianconi1-0/+15
2022-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski5-12/+38
2022-07-14netfilter: nf_nat: in nf_nat_initialized(), use const struct nf_conn *James Yonan1-1/+1
2022-07-11netfilter: nf_tables: move nft_cmp_fast_mask to where its usedFlorian Westphal1-10/+0
2022-07-11netfilter: nf_tables: add and use BE register load-store helpersFlorian Westphal1-0/+15
2022-07-11netfilter: nf_conntrack: add missing __rcu annotationsFlorian Westphal1-1/+1
2022-07-11netfilter: nf_flow_table: count pending offload workqueue tasksVlad Buslov1-0/+21
2022-07-09netfilter: nf_tables: replace BUG_ON by element length checkPablo Neira Ayuso1-5/+9
2022-06-27netfilter: nf_tables: avoid skb access on nf_stolenFlorian Westphal1-6/+10
2022-06-06netfilter: nf_tables: bail out early if hardware offload is not supportedPablo Neira Ayuso1-1/+1
2022-06-02netfilter: nf_tables: delete flowtable hooks via transaction listPablo Neira Ayuso1-1/+0
2022-05-27netfilter: conntrack: re-fetch conntrack after insertionFlorian Westphal1-1/+6
2022-05-16netfilter: nf_conncount: reduce unnecessary GCWilliam Tu1-0/+1
2022-05-13netfilter: conntrack: skip verification of zero UDP checksumKevin Mitchell1-4/+17
2022-05-13netfilter: prefer extension check to pointer checkFlorian Westphal2-17/+16
2022-05-13netfilter: conntrack: un-inline nf_ct_ecache_ext_addFlorian Westphal1-25/+5
2022-05-13netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*()Pablo Neira Ayuso1-3/+9
2022-05-13netfilter: conntrack: remove unconfirmed listFlorian Westphal1-1/+0
2022-05-13netfilter: extensions: introduce extension genid countFlorian Westphal2-16/+25
2022-05-13netfilter: remove nf_ct_unconfirmed_destroy helperFlorian Westphal1-3/+0
2022-05-13netfilter: cttimeout: decouple unlink and free on netns destructionFlorian Westphal1-8/+0
2022-05-13netfilter: conntrack: include ecache dying list in dumpsFlorian Westphal1-0/+2
2022-05-13netfilter: ecache: use dedicated list for event redeliveryFlorian Westphal2-3/+2
2022-04-08netfilter: ecache: move to separate structureFlorian Westphal1-2/+6
2022-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+18
2022-03-20netfilter: nft_fib: add reduce supportFlorian Westphal1-0/+3
2022-03-20netfilter: nft_meta: extend reduce support to bridge familyFlorian Westphal1-0/+2
2022-03-20netfilter: nf_tables: cancel tracking for clobbered destination registersPablo Neira Ayuso2-0/+15
2022-03-20netfilter: nf_tables: do not reduce read-only expressionsPablo Neira Ayuso1-0/+8
2022-03-20netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned()Phil Sutter1-0/+1
2022-03-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+0
2022-03-16netfilter: flowtable: Fix QinQ and pppoe support for inet tablePablo Neira Ayuso1-0/+18
2022-03-08Revert "netfilter: conntrack: tag conntracks picked up in local out hook"Florian Westphal1-1/+0
2022-03-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-2/+6
2022-03-01net/sched: act_ct: Fix flow table lookup failure with no originating ifindexPaul Blakey1-1/+5
2022-03-01netfilter: nf_queue: fix possible use-after-freeFlorian Westphal1-1/+1
2022-02-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-3/+1
2022-02-20netfilter: nf_tables_offload: incorrect flow offload action array sizePablo Neira Ayuso2-3/+1
2022-02-09netfilter: nft_cmp: optimize comparison for 16-bytesPablo Neira Ayuso1-0/+9
2022-02-09netfilter: cttimeout: use option structureFlorian Westphal1-2/+6
2022-02-09netfilter: ecache: don't use nf_conn spinlockFlorian Westphal1-1/+1
2022-02-04netfilter: conntrack: remove extension register apiFlorian Westphal7-54/+0
2022-02-04netfilter: conntrack: handle ->destroy hook via nat_ops insteadFlorian Westphal1-3/+0
2022-02-04netfilter: conntrack: move extension sizes into coreFlorian Westphal1-1/+0