summaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nfnetlink_queue: remove old clash resolution logicFlorian Westphal2024-09-262-86/+0
* netfilter: nf_tables: missing objects with no memcg accountingPablo Neira Ayuso2024-09-267-15/+17
* netfilter: nf_tables: use rcu chain hook list iterator from netlink dump pathPablo Neira Ayuso2024-09-261-1/+1
* netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_E...Simon Horman2024-09-261-5/+2
* netfilter: nf_tables: Keep deleted flowtable hooks until after RCUPhil Sutter2024-09-261-1/+1
* netfilter: ctnetlink: Guard possible unused functionsAndy Shevchenko2024-09-261-1/+1
* netfilter: conntrack: add clash resolution for reverse collisionsFlorian Westphal2024-09-261-5/+51
* netfilter: nf_nat: don't try nat source port reallocation for reverse dir clashFlorian Westphal2024-09-261-2/+118
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-09-151-2/+2
|\
| * netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtre...Dan Carpenter2024-09-151-2/+2
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-09-133-7/+49
|\|
| * net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_...Lorenzo Bianconi2024-09-122-1/+7
| * netfilter: nft_socket: make cgroupsv2 matching work with namespacesFlorian Westphal2024-09-121-3/+38
| * netfilter: nft_socket: fix sk refcount leaksFlorian Westphal2024-09-121-3/+4
* | netfilter: nft_flow_offload: Unmask upper DSCP bits in nft_flow_route()Ido Schimmel2024-09-091-1/+2
* | Merge tag 'nf-next-24-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2024-09-0726-148/+165
|\ \
| * | netfilter: nf_tables: set element timeout update supportPablo Neira Ayuso2024-09-032-5/+44
| * | netfilter: nf_tables: zero timeout means element never times outPablo Neira Ayuso2024-09-032-17/+25
| * | netfilter: nf_tables: consolidate timeout extension for elementsPablo Neira Ayuso2024-09-032-34/+22
| * | netfilter: nf_tables: annotate data-races around element expirationPablo Neira Ayuso2024-09-032-2/+2
| * | netfilter: nft_dynset: annotate data-races around set timeoutPablo Neira Ayuso2024-09-031-3/+3
| * | netfilter: nf_tables: remove annotation to access set timeout while holding lockPablo Neira Ayuso2024-09-031-2/+2
| * | netfilter: nf_tables: reject expiration higher than timeoutPablo Neira Ayuso2024-09-031-0/+3
| * | netfilter: nf_tables: reject element expiration with no timeoutPablo Neira Ayuso2024-09-031-0/+3
| * | netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso2024-09-031-1/+1
| * | netfilter: nf_tables: drop unused 3rd argument from validate callback opsFlorian Westphal2024-09-0321-46/+23
| * | netfilter: conntrack: Convert to use ERR_CAST()Shen Lichuan2024-09-031-1/+1
| * | netfilter: Use kmemdup_array instead of kmemdup for multiple allocationYan Zhen2024-09-031-1/+1
| * | netfilter: nft_counter: Use u64_stats_t for statistic.Sebastian Andrzej Siewior2024-09-031-44/+46
| * | netfilter: ctnetlink: support CTA_FILTER for flushChangliang Wu2024-09-031-6/+3
* | | net/netfilter: make use of the helper macro LIST_HEAD()Hongbo Li2024-09-071-3/+1
|/ /
* | Merge tag 'nf-next-24-08-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2024-08-2625-70/+125
|\ \ | |/ |/|
| * netfilter: nf_tables: don't initialize registers in nft_do_chain()Florian Westphal2024-08-201-1/+1
| * netfilter: nf_tables: allow loads only when register is initializedFlorian Westphal2024-08-201-4/+34
| * netfilter: nf_tables: pass context structure to nft_parse_register_loadFlorian Westphal2024-08-2020-32/+33
| * netfilter: move nf_ct_netns_get out of nf_conncount_initXin Long2024-08-192-14/+16
| * netfilter: nf_tables: do not remove elements if set backend implements .abortPablo Neira Ayuso2024-08-191-1/+4
| * netfilter: nf_tables: store new sets in dedicated listFlorian Westphal2024-08-191-9/+20
| * netfilter: nfnetlink: convert kfree_skb to consume_skbDonald Hunter2024-08-191-7/+7
| * netfilter: nfnetlink_queue: unbreak SCTP trafficAntonio Ojea2024-08-191-2/+10
* | netfilter: flowtable: validate vlan headerPablo Neira Ayuso2024-08-222-0/+6
* | netfilter: nft_counter: Synchronize nft_counter_reset() against reader.Sebastian Andrzej Siewior2024-08-201-0/+5
* | netfilter: nft_counter: Disable BH in nft_counter_offload_stats().Sebastian Andrzej Siewior2024-08-201-2/+2
|/
* netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requestsPhil Sutter2024-08-141-13/+59
* netfilter: nf_tables: Introduce nf_tables_getobj_singlePhil Sutter2024-08-141-31/+44
* netfilter: nf_tables: Audit log dump reset after the factPhil Sutter2024-08-141-15/+13
* netfilter: nf_queue: drop packets with cloned unconfirmed conntracksFlorian Westphal2024-08-141-2/+33
* netfilter: flowtable: initialise extack before useDonald Hunter2024-08-141-1/+1
* netfilter: nfnetlink: Initialise extack before use in ACKsDonald Hunter2024-08-141-1/+4
* Merge tag 'net-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds2024-07-251-2/+10
|\