summaryrefslogtreecommitdiff
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2026-04-18netfilter: nft_ct: fix use-after-free in timeout object destroyTuan Do1-0/+1
2026-04-18netfilter: nft_set_pipapo: split gc into unlink and reclaim phaseFlorian Westphal1-0/+5
2026-04-18netfilter: nf_tables: de-constify set commit ops function argumentFlorian Westphal1-1/+1
2026-03-04netfilter: nf_conncount: increase the connection clean up limit to 64Fernando Fernandez Mancera1-0/+1
2026-01-19netfilter: nf_conncount: rework API to use sk_buff directlyFernando Fernandez Mancera1-9/+8
2026-01-19netfilter: nf_conncount: reduce unnecessary GCWilliam Tu1-0/+1
2025-07-17netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()Eric Dumazet1-1/+1
2025-05-22netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-3/+0
2025-05-22netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso1-0/+3
2025-05-22netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal1-1/+1
2025-01-09netfilter: nft_set_hash: unaligned atomic read on struct nft_set_extPablo Neira Ayuso1-2/+5
2024-10-17netfilter: nft_set_pipapo: walk over current view on netlink dumpPablo Neira Ayuso1-0/+13
2024-08-19netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal1-2/+2
2024-08-19netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso1-2/+14
2024-07-05netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso1-0/+5
2024-06-16netfilter: nft_payload: move struct nft_payload_set definition where it belongsPablo Neira Ayuso1-10/+0
2024-04-27netfilter: flowtable: validate pppoe headerPablo Neira Ayuso1-1/+11
2024-04-27netfilter: nf_flow_table: count pending offload workqueue tasksVlad Buslov1-0/+21
2024-03-06netfilter: let reset rules clean out conntrack entriesFlorian Westphal1-0/+8
2024-03-01netfilter: nft_flow_offload: reset dst in route object after setting up flowPablo Neira Ayuso1-1/+1
2024-03-01netfilter: flowtable: simplify route logicPablo Neira Ayuso1-2/+2
2024-02-23netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEVPablo Neira Ayuso1-0/+2
2023-11-28netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()Dan Carpenter1-2/+2
2023-11-28netfilter: nf_tables: add and use BE register load-store helpersFlorian Westphal1-0/+15
2023-11-20netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate e...Jeremy Sowden1-2/+1
2023-10-06netfilter: nf_tables: fix kdoc warnings after gc reworkFlorian Westphal1-0/+1
2023-10-06netfilter: nf_tables: fix memleak when more than 255 elements expiredFlorian Westphal1-1/+1
2023-10-06netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GCPablo Neira Ayuso1-2/+3
2023-10-06netfilter: nf_tables: defer gc run if previous batch is still pendingFlorian Westphal1-0/+5
2023-10-06netfilter: nf_tables: remove busy mark and gc batch APIPablo Neira Ayuso1-95/+3
2023-10-06netfilter: nf_tables: GC transaction API to avoid race with control planePablo Neira Ayuso1-1/+63
2023-08-16netfilter: nf_tables: report use refcount overflowPablo Neira Ayuso1-4/+27
2023-07-23netfilter: nf_tables: drop map element references from preparation phasePablo Neira Ayuso1-1/+4
2023-06-28netfilter: nf_tables: reject unbound anonymous set before commit phasePablo Neira Ayuso1-0/+3
2023-06-28netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chainPablo Neira Ayuso1-0/+2
2023-06-28netfilter: nf_tables: fix chain binding transaction logicPablo Neira Ayuso1-1/+20
2023-06-21netfilter: nf_tables: integrate pipapo into commit protocolPablo Neira Ayuso1-1/+3
2023-05-11netfilter: nf_tables: deactivate anonymous set from preparation phasePablo Neira Ayuso1-0/+1
2023-04-26netfilter: nf_tables: validate catch-all set elementsPablo Neira Ayuso1-0/+4
2023-03-17netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal1-0/+7
2023-01-12netfilter: nf_tables: honor set timeout and garbage collection updatesPablo Neira Ayuso1-1/+12
2023-01-12netfilter: nf_tables: consolidate set descriptionPablo Neira Ayuso1-0/+12
2022-08-31netfilter: flowtable: fix stuck flows on cleanup due to pending workPablo Neira Ayuso1-0/+2
2022-08-31netfilter: flowtable: add function to invoke garbage collection immediatelyPablo Neira Ayuso1-0/+1
2022-08-31netfilter: nf_tables: disallow jump to implicit chain from set elementPablo Neira Ayuso1-0/+5
2022-08-31netfilter: nf_tables: upfront validation of data via nft_data_init()Pablo Neira Ayuso1-2/+2
2022-08-31netfilter: nft_cmp: optimize comparison for 16-bytesPablo Neira Ayuso1-0/+9
2022-08-31netfilter: nf_tables: make table handle allocation per-netns friendlyPablo Neira Ayuso1-0/+1
2022-07-21netfilter: nf_tables: replace BUG_ON by element length checkPablo Neira Ayuso1-5/+9
2022-07-12netfilter: nft_payload: support for inner header matching / manglingPablo Neira Ayuso1-0/+2
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-17 12:28:43 +0000