summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2023-04-26netfilter: nf_tables: tighten netlink attribute requirements for catch-all el...Pablo Neira Ayuso
2023-04-26netfilter: nf_tables: validate catch-all set elementsPablo Neira Ayuso
2023-04-26netfilter: nf_tables: Modify nla_memdup's flag to GFP_KERNEL_ACCOUNTChen Aotian
2023-03-22netfilter: nft_redir: correct value of inet type `.maxattrs`Jeremy Sowden
2023-03-22netfilter: nft_redir: correct length for loading protocol registersJeremy Sowden
2023-03-22netfilter: nft_masq: correct length for loading protocol registersJeremy Sowden
2023-03-22netfilter: nft_nat: correct length for loading protocol registersJeremy Sowden
2023-03-17netfilter: conntrack: adopt safer max chain lengthEric Dumazet
2023-03-17netfilter: ctnetlink: revert to dumping mark regardless of event typeIvan Delalande
2023-03-17netfilter: nft_quota: copy content when cloning expressionPablo Neira Ayuso
2023-03-17netfilter: nft_last: copy content when cloning expressionPablo Neira Ayuso
2023-03-11netfilter: ctnetlink: make event listener tracking globalFlorian Westphal
2023-03-11netfilter: xt_length: use skb len to match in length_mt6Xin Long
2023-03-11netfilter: conntrack: fix rmmod double-free raceFlorian Westphal
2023-03-11netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()Hangyu Hua
2023-03-11netfilter: nf_tables: allow to fetch set elements when table has an ownerPablo Neira Ayuso
2023-03-10netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()Alok Tiwari
2023-02-09use less confusing names for iov_iter direction initializersAl Viro
2023-02-01netfilter: conntrack: unify established states for SCTP pathsSriram Yagnaraman
2023-02-01netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETESriram Yagnaraman
2023-02-01netfilter: nft_set_rbtree: skip elements in transaction from garbage collectionPablo Neira Ayuso
2023-02-01netfilter: nft_set_rbtree: Switch to node list walk for overlap detectionPablo Neira Ayuso
2023-02-01netfilter: conntrack: handle tcp challenge acks during connection reuseFlorian Westphal
2023-01-18netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.Gavrilov Ilia
2023-01-18netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bitsPablo Neira Ayuso
2023-01-12netfilter: ipset: Rework long task execution when adding/deleting entriesJozsef Kadlecsik
2023-01-12netfilter: ipset: fix hash:net,port,net hang with /0 subnetJozsef Kadlecsik
2023-01-12netfilter: nf_tables: honor set timeout and garbage collection updatesPablo Neira Ayuso
2023-01-12netfilter: nf_tables: perform type checking for existing setsPablo Neira Ayuso
2023-01-12netfilter: nf_tables: add function to create set stateful expressionsPablo Neira Ayuso
2023-01-12netfilter: nf_tables: consolidate set descriptionPablo Neira Ayuso
2022-12-31netfilter: flowtable: really fix NAT IPv6 offloadQingfang DENG
2022-12-31ipvs: use u64_stats_t for the per-cpu countersJulian Anastasov
2022-12-31netfilter: conntrack: set icmpv6 redirects as RELATEDFlorian Westphal
2022-11-30netfilter: ctnetlink: fix compilation warning after data race fixes in ct markPablo Neira Ayuso
2022-11-30netfilter: conntrack: fix using __this_cpu_add in preemptibleXin Long
2022-11-28netfilter: flowtable_offload: fix using __this_cpu_add in preemptibleXin Long
2022-11-28netfilter: nft_set_pipapo: Actually validate intervals in fields after the fi...Stefano Brivio
2022-11-22netfilter: flowtable_offload: add missing lockingFelix Fietkau
2022-11-22netfilter: ipset: restore allowing 64 clashing elements in hash:net,ifaceJozsef Kadlecsik
2022-11-21netfilter: ipset: regression in ip_set_hash_ip.cVishwanath Pai
2022-11-18netfilter: nf_tables: do not set up extensions for end intervalPablo Neira Ayuso
2022-11-18netfilter: conntrack: Fix data-races around ct markDaniel Xu
2022-11-08netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()Shigeru Yoshida
2022-11-08netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()Ziyang Xuan
2022-11-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski
2022-11-02netfilter: ipset: enforce documented limit to prevent allocating huge memoryJozsef Kadlecsik
2022-11-02netfilter: nf_nat: Fix possible memory leak in nf_nat_init()Chen Zhongjin
2022-11-02ipvs: fix WARNING in ip_vs_app_net_cleanup()Zhengchao Shao
2022-11-02ipvs: fix WARNING in __ip_vs_cleanup_batch()Zhengchao Shao