summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2024-01-25ipvs: avoid stat macros calls from preemptible contextFedor Pchelkin
2024-01-25netfilter: nf_tables: reject NFT_SET_CONCAT with not field length descriptionPablo Neira Ayuso
2024-01-25netfilter: nf_tables: skip dead set elements in netlink dumpPablo Neira Ayuso
2024-01-25netfilter: nf_tables: do not allow mismatch field size and set key lengthPablo Neira Ayuso
2024-01-25netfilter: propagate net to nf_bridge_get_physindevPavel Tikhomirov
2024-01-25netfilter: nf_queue: remove excess nf_bridge variablePavel Tikhomirov
2024-01-25netfilter: nfnetlink_log: use proper helper for fetching physinifPavel Tikhomirov
2024-01-25netfilter: nft_limit: do not ignore unsupported flagsPablo Neira Ayuso
2024-01-25netfilter: nf_tables: reject invalid set policyPablo Neira Ayuso
2024-01-25netfilter: nf_tables: check if catch-all set element is active in next genera...Pablo Neira Ayuso
2024-01-25netfilter: nf_tables: validate chain type update if availablePablo Neira Ayuso
2024-01-25netfilter: nf_tables: mark newset as dead on transaction abortFlorian Westphal
2024-01-10netfilter: nft_immediate: drop chain reference counter on errorPablo Neira Ayuso
2024-01-10netfilter: nf_nat: fix action not being set for all ct statesBrad Cowie
2024-01-10netfilter: nf_tables: set transport offset from mac header for netdev/egressPablo Neira Ayuso
2024-01-05netfilter: nf_tables: skip set commit for deleted/destroyed setsPablo Neira Ayuso
2023-12-13netfilter: nft_set_pipapo: skip inactive elements during set walkFlorian Westphal
2023-12-13netfilter: xt_owner: Fix for unsafe access of sk->sk_socketPhil Sutter
2023-12-13netfilter: nf_tables: validate family when identifying table via handlePablo Neira Ayuso
2023-12-13netfilter: nf_tables: bail out on mismatching dynset and set expressionsPablo Neira Ayuso
2023-12-13netfilter: nf_tables: fix 'exist' matching on bigendian archesFlorian Westphal
2023-12-13netfilter: bpf: fix bad registration on nf_defragD. Wythe
2023-12-13netfilter: ipset: fix race condition between swap/destroy and kernel side add...Jozsef Kadlecsik
2023-11-28netfilter: nf_tables: split async and sync catchall in two functionsPablo Neira Ayuso
2023-11-28netfilter: nf_tables: remove catchall element in GC sync pathPablo Neira Ayuso
2023-11-28netfilter: nf_tables: bogus ENOENT when destroying element which does not existPablo Neira Ayuso
2023-11-28netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()Dan Carpenter
2023-11-20netfilter: nat: fix ipv6 nat redirect with mapped and scoped addressesFlorian Westphal
2023-11-20netfilter: xt_recent: fix (increase) ipv6 literal buffer lengthMaciej Żenczykowski
2023-11-20netfilter: nf_tables: Drop pointless memset when dumping rulesPhil Sutter
2023-10-25netfilter: flowtable: GC pushes back packets to classic pathPablo Neira Ayuso
2023-10-18netfilter: nf_tables: revert do not remove elements if set backend implements...Pablo Neira Ayuso
2023-10-18netfilter: nft_set_rbtree: .deactivate fails if element has expiredPablo Neira Ayuso
2023-10-18netfilter: nf_tables: audit log object reset once per tablePhil Sutter
2023-10-12netfilter: nft_payload: fix wrong mac header matchingFlorian Westphal
2023-10-12nf_tables: fix NULL pointer dereference in nft_expr_inner_parse()Xingyuan Mo
2023-10-12nf_tables: fix NULL pointer dereference in nft_inner_init()Xingyuan Mo
2023-10-12netfilter: nf_tables: do not refresh timeout when resetting elementPablo Neira Ayuso
2023-10-12netfilter: nf_tables: Annotate struct nft_pipapo_match with __counted_byKees Cook
2023-10-12netfilter: nfnetlink_log: silence bogus compiler warningFlorian Westphal
2023-10-12netfilter: nf_tables: do not remove elements if set backend implements .abortPablo Neira Ayuso
2023-10-04netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failureFlorian Westphal
2023-10-04netfilter: nf_tables: Deduplicate nft_register_obj audit logsPhil Sutter
2023-10-04netfilter: handle the connecting collision properly in nf_conntrack_proto_sctpXin Long
2023-10-04netfilter: nft_payload: rebuild vlan header on h_proto accessFlorian Westphal
2023-10-01net: prevent address rewrite in kernel_bind()Jordan Rife
2023-10-01net: replace calls to sock->ops->connect() with kernel_connect()Jordan Rife
2023-09-20netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAPJozsef Kadlecsik
2023-09-20netfilter: nf_tables: fix memleak when more than 255 elements expiredFlorian Westphal
2023-09-20netfilter: nf_tables: disable toggling dormant table state more than onceFlorian Westphal
generated by cgit v1.2.3 (git 2.39.1) at 2026-09-19 16:52:02 +0000