aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-04-02netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso1-1/+2
2025-03-25Merge tag 'nf-next-25-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski5-19/+20
2025-03-23netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPO...WangYuli1-7/+4
2025-03-23netfilter: xtables: Use strscpy() instead of strscpy_pad()Thorsten Blum1-1/+1
2025-03-23netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation errorChenyuan Yang1-1/+1
2025-03-17tcp: extend TCP flags to allow AE bit/ACE fieldIlpo Järvinen1-3/+5
2025-03-13netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-12netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet1-3/+9
2025-03-12netfilter: xt_hashlimit: replace vmalloc calls with kvmallocDenis Kirjanov1-7/+5
2025-03-12ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-12netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-03-06net: hold netdev instance lock during nft ndo_setup_tcStanislav Fomichev2-2/+2
2025-03-06netfilter: nf_tables: make destruction work queue pernetFlorian Westphal2-14/+18
2025-03-05netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen1-2/+2
2025-03-03netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-02-12Revert "netfilter: flowtable: teardown flow if cached mtu is stale"Pablo Neira Ayuso1-6/+2
2025-01-30Merge tag 'net-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-4/+4
2025-01-30Merge tag 'nf-25-01-30' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski1-4/+4
2025-01-30netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-01-26Merge tag 'mm-nonmm-stable-2025-01-24-23-16' of git://git.kernel.org/pub/scm/...Linus Torvalds1-13/+8
2025-01-22Merge tag 'net-next-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds17-167/+405
2025-01-21Merge tag 'lsm-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-28/+29
2025-01-19netfilter: flowtable: add CLOSING statePablo Neira Ayuso2-19/+57
2025-01-19netfilter: flowtable: teardown flow if cached mtu is stalePablo Neira Ayuso1-2/+6
2025-01-19netfilter: conntrack: rework offload nf_conn timeout extension logicFlorian Westphal2-8/+103
2025-01-19netfilter: conntrack: remove skb argument from nf_ct_refreshFlorian Westphal6-11/+10
2025-01-19netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-01-19netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpathFlorian Westphal1-2/+12
2025-01-19netfilter: nf_tables: Simplify chain netdev notifierPhil Sutter1-14/+7
2025-01-19netfilter: nf_tables: Tolerate chains with no remaining hooksPhil Sutter2-63/+7
2025-01-19netfilter: nf_tables: Compare netdev hooks based on stored namePhil Sutter1-1/+1
2025-01-19netfilter: nf_tables: Use stored ifname in netdev hook dumpsPhil Sutter1-4/+6
2025-01-19netfilter: nf_tables: Store user-defined hook ifnamePhil Sutter1-3/+7
2025-01-19netfilter: nf_tables: Flowtable hook's pf value never variesPhil Sutter1-7/+4
2025-01-19netfilter: nf_tables: fix set size with rbtree backendPablo Neira Ayuso2-2/+90
2025-01-14Merge tag 'nf-next-25-01-11' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni5-27/+84
2025-01-12netfilter: conntrack: cleanup timeout definitionsEaswar Hariharan1-13/+8
2025-01-10Merge tag 'ipsec-next-2025-01-09' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller1-1/+2
2025-01-09netfilter: conntrack: add conntrack event timestampFlorian Westphal2-0/+48
2025-01-09netfilter: conntrack: clamp maximum hashtable size to INT_MAXPablo Neira Ayuso1-1/+4
2025-01-09netfilter: nf_tables: imbalance in flowtable bindingPablo Neira Ayuso1-4/+11
2025-01-05netfilter: xt_hashlimit: htable_selective_cleanup() optimizationEric Dumazet1-1/+5
2025-01-05ipvs: speed up reads from ip_vs_conn proc fileFlorian Westphal1-22/+28
2025-01-05netfilter: nf_tables: remove the genmask parametertuqiang1-4/+3
2025-01-04net: corrections for security_secid_to_secctx returnsCasey Schaufler1-5/+7
2024-12-19netfilter: ipset: Fix for recursive locking warningPhil Sutter1-0/+3
2024-12-18ipvs: Fix clamp() of ip_vs_conn_tab on small memory systemsDavid Laight1-2/+2
2024-12-11netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-17/+15
2024-12-11netfilter: IDLETIMER: Fix for possible ABBA deadlockPhil Sutter1-24/+28
2024-12-05xfrm: add generic iptfs defines and functionalityChristian Hopps1-1/+2
generated by cgit