summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2022-09-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2022-09-21netfilter: conntrack: revisit the gc initial rescheduling biasAntoine Tenart
2022-09-21netfilter: conntrack: fix the gc rescheduling delayAntoine Tenart
2022-09-20netfilter: nf_ct_ftp: fix deadlock when nat rewrite is neededFlorian Westphal
2022-09-20netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()Tetsuo Handa
2022-09-20netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()Tetsuo Handa
2022-09-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller
2022-09-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni
2022-09-07netfilter: nat: avoid long-running port range loopFlorian Westphal
2022-09-07netfilter: nat: move repetitive nat port reserve loop to a helperFlorian Westphal
2022-09-07netfilter: move from strlcpy with unused retval to strscpyWolfram Sang
2022-09-07netfilter: conntrack: reduce timeout when receiving out-of-window fin or rstFlorian Westphal
2022-09-07netfilter: conntrack: remove unneeded indent levelFlorian Westphal
2022-09-07netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()Pablo Neira Ayuso
2022-09-07netfilter: nf_conntrack_irc: Tighten matching on DCC messageDavid Leadbeater
2022-09-07netfilter: conntrack: ignore overly delayed tcp packetsFlorian Westphal
2022-09-07netfilter: conntrack: prepare tcp_in_window for ternary return valueFlorian Westphal
2022-09-07netfilter: nf_conntrack_sip: fix ct_sip_walk_headersIgor Ryzhov
2022-09-07netfilter: nft_payload: reject out-of-range attributes via policyFlorian Westphal
2022-09-05netlink: Bounds-check struct nlmsgerr creationKees Cook
2022-09-01netfilter: nf_conntrack_irc: Fix forged IP logicDavid Leadbeater
2022-08-31netfilter: nf_tables: clean up hook list when offload flags check failsPablo Neira Ayuso
2022-08-31netfilter: remove nf_conntrack_helper sysctl and modparam togglesPablo Neira Ayuso
2022-08-29genetlink: start to validate reserved header bytesJakub Kicinski
2022-08-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2022-08-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski
2022-08-24net: Fix data-races around sysctl_[rw]mem_(max|default).Kuniyuki Iwashima
2022-08-24netfilter: flowtable: fix stuck flows on cleanup due to pending workPablo Neira Ayuso
2022-08-24netfilter: flowtable: add function to invoke garbage collection immediatelyPablo Neira Ayuso
2022-08-24netfilter: nf_tables: disallow binding to already bound chainPablo Neira Ayuso
2022-08-24netfilter: nft_tunnel: restrict it to netdev familyPablo Neira Ayuso
2022-08-24netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet familiesPablo Neira Ayuso
2022-08-24netfilter: nf_tables: do not leave chain stats enabled on errorPablo Neira Ayuso
2022-08-24netfilter: nft_payload: do not truncate csum_offset and csum_typePablo Neira Ayuso
2022-08-24netfilter: nft_payload: report ERANGE for too long offset and lengthPablo Neira Ayuso
2022-08-24netfilter: nf_tables: make table handle allocation per-netns friendlyPablo Neira Ayuso
2022-08-24netfilter: nf_tables: disallow updates of implicit chainPablo Neira Ayuso
2022-08-23netfilter: nft_tproxy: restrict to prerouting hookFlorian Westphal
2022-08-23netfilter: conntrack: work around exceeded receive windowFlorian Westphal
2022-08-22Remove DECnet support from kernelStephen Hemminger
2022-08-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2022-08-17Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski
2022-08-17netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to yGeert Uytterhoeven
2022-08-15netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specifiedPablo Neira Ayuso
2022-08-15netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVA...Pablo Neira Ayuso
2022-08-15netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flagsPablo Neira Ayuso
2022-08-12netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flagPablo Neira Ayuso
2022-08-11netfilter: nf_tables: really skip inactive sets when allocating namePablo Neira Ayuso
2022-08-11netfilter: nfnetlink: re-enable conntrack expectation eventsFlorian Westphal
2022-08-11netfilter: nf_tables: fix scheduling-while-atomic splatFlorian Westphal