summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2023-01-12netfilter: ipset: Rework long task execution when adding/deleting entriesJozsef Kadlecsik
2023-01-12netfilter: ipset: fix hash:net,port,net hang with /0 subnetJozsef Kadlecsik
2023-01-12netfilter: nf_tables: honor set timeout and garbage collection updatesPablo Neira Ayuso
2023-01-12netfilter: nf_tables: perform type checking for existing setsPablo Neira Ayuso
2023-01-12netfilter: nf_tables: add function to create set stateful expressionsPablo Neira Ayuso
2023-01-12netfilter: nf_tables: consolidate set descriptionPablo Neira Ayuso
2022-12-31netfilter: flowtable: really fix NAT IPv6 offloadQingfang DENG
2022-12-31ipvs: use u64_stats_t for the per-cpu countersJulian Anastasov
2022-12-31net: Remove the obsolte u64_stats_fetch_*_irq() users (net).Thomas Gleixner
2022-12-31netfilter: conntrack: set icmpv6 redirects as RELATEDFlorian Westphal
2022-12-14netfilter: ctnetlink: fix compilation warning after data race fixes in ct markPablo Neira Ayuso
2022-12-14netfilter: conntrack: fix using __this_cpu_add in preemptibleXin Long
2022-12-14netfilter: flowtable_offload: fix using __this_cpu_add in preemptibleXin Long
2022-12-14netfilter: nft_set_pipapo: Actually validate intervals in fields after the fi...Stefano Brivio
2022-12-02netfilter: flowtable_offload: add missing lockingFelix Fietkau
2022-12-02netfilter: ipset: restore allowing 64 clashing elements in hash:net,ifaceJozsef Kadlecsik
2022-12-02netfilter: ipset: regression in ip_set_hash_ip.cVishwanath Pai
2022-12-02netfilter: nf_tables: do not set up extensions for end intervalPablo Neira Ayuso
2022-12-02netfilter: conntrack: Fix data-races around ct markDaniel Xu
2022-11-26netlink: Bounds-check struct nlmsgerr creationKees Cook
2022-11-16netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()Shigeru Yoshida
2022-11-16netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()Ziyang Xuan
2022-11-10netfilter: ipset: enforce documented limit to prevent allocating huge memoryJozsef Kadlecsik
2022-11-10ipvs: fix WARNING in ip_vs_app_net_cleanup()Zhengchao Shao
2022-11-10ipvs: fix WARNING in __ip_vs_cleanup_batch()Zhengchao Shao
2022-11-10ipvs: use explicitly signed charsJason A. Donenfeld
2022-11-10netfilter: nf_tables: release flow rule object from commit pathPablo Neira Ayuso
2022-11-10netfilter: nf_tables: netlink notifier might race to release objectsPablo Neira Ayuso
2022-10-29netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirementsPablo Neira Ayuso
2022-10-21netfilter: conntrack: revisit the gc initial rescheduling biasAntoine Tenart
2022-10-21netfilter: conntrack: fix the gc rescheduling delayAntoine Tenart
2022-09-20netfilter: nf_ct_ftp: fix deadlock when nat rewrite is neededFlorian Westphal
2022-09-20netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()Tetsuo Handa
2022-09-20netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()Tetsuo Handa
2022-09-07netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()Pablo Neira Ayuso
2022-09-07netfilter: nf_conntrack_irc: Tighten matching on DCC messageDavid Leadbeater
2022-09-07netfilter: nf_conntrack_sip: fix ct_sip_walk_headersIgor Ryzhov
2022-09-01netfilter: nf_conntrack_irc: Fix forged IP logicDavid Leadbeater
2022-08-31netfilter: nf_tables: clean up hook list when offload flags check failsPablo Neira Ayuso
2022-08-31netfilter: remove nf_conntrack_helper sysctl and modparam togglesPablo Neira Ayuso
2022-08-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski
2022-08-24net: Fix data-races around sysctl_[rw]mem_(max|default).Kuniyuki Iwashima
2022-08-24netfilter: flowtable: fix stuck flows on cleanup due to pending workPablo Neira Ayuso
2022-08-24netfilter: flowtable: add function to invoke garbage collection immediatelyPablo Neira Ayuso
2022-08-24netfilter: nf_tables: disallow binding to already bound chainPablo Neira Ayuso
2022-08-24netfilter: nft_tunnel: restrict it to netdev familyPablo Neira Ayuso
2022-08-24netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet familiesPablo Neira Ayuso
2022-08-24netfilter: nf_tables: do not leave chain stats enabled on errorPablo Neira Ayuso
2022-08-24netfilter: nft_payload: do not truncate csum_offset and csum_typePablo Neira Ayuso
2022-08-24netfilter: nft_payload: report ERANGE for too long offset and lengthPablo Neira Ayuso