summaryrefslogtreecommitdiff
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-07-24netfilter: nf_conntrack: fix crash due to removal of uninitialised entryFlorian Westphal1-2/+13
2025-07-17netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()Eric Dumazet1-1/+1
2025-05-22netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-3/+0
2025-05-22netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso1-0/+4
2025-05-22netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal1-1/+1
2025-03-07netfilter: allow exp not to be removed in nf_ct_find_expectationXin Long1-1/+1
2025-01-09netfilter: nft_set_hash: unaligned atomic read on struct nft_set_extPablo Neira Ayuso1-2/+5
2024-09-30netfilter: nft_set_pipapo: walk over current view on netlink dumpPablo Neira Ayuso1-0/+13
2024-09-04netfilter: nf_tables_ipv6: consider network offset in netdev/egress validationPablo Neira Ayuso1-2/+3
2024-09-04netfilter: nf_tables: restore IP sanity checks for netdev/egressPablo Neira Ayuso1-4/+6
2024-08-14netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal1-2/+2
2024-07-05netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso1-0/+5
2024-07-05netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso1-2/+14
2024-06-12netfilter: nft_payload: move struct nft_payload_set definition where it belongsPablo Neira Ayuso1-10/+0
2024-04-27netfilter: flowtable: validate pppoe headerPablo Neira Ayuso1-1/+11
2024-03-06netfilter: let reset rules clean out conntrack entriesFlorian Westphal1-0/+8
2024-03-01netfilter: nft_flow_offload: reset dst in route object after setting up flowPablo Neira Ayuso1-1/+1
2024-03-01netfilter: flowtable: simplify route logicPablo Neira Ayuso1-2/+2
2024-02-05netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEVPablo Neira Ayuso1-0/+2
2024-01-10net/sched: act_ct: Always fill offloading tuple iifidxVlad Buslov1-13/+17
2024-01-10net/sched: act_ct: Take per-cb reference to tcf_ct_flow_tableVlad Buslov1-0/+10
2024-01-10netfilter: flowtable: GC pushes back packets to classic pathPablo Neira Ayuso1-0/+1
2024-01-10net/sched: act_ct: Fix promotion of offloaded unreplied tuplePaul Blakey1-1/+1
2024-01-10netfilter: flowtable: cache info of last offloadVlad Buslov1-3/+4
2024-01-10netfilter: flowtable: allow unidirectional rulesVlad Buslov1-0/+1
2024-01-10netfilter: nf_tables: set transport offset from mac header for netdev/egressPablo Neira Ayuso1-1/+1
2024-01-10netfilter: use skb_ip_totlen and iph_totlenXin Long1-2/+2
2023-11-28netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()Dan Carpenter1-2/+2
2023-11-20netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate e...Jeremy Sowden1-2/+1
2023-10-06netfilter: nf_tables: fix kdoc warnings after gc reworkFlorian Westphal1-0/+1
2023-10-06netfilter: nf_tables: fix memleak when more than 255 elements expiredFlorian Westphal1-1/+1
2023-10-06netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GCPablo Neira Ayuso1-2/+3
2023-10-06netfilter: nf_tables: defer gc run if previous batch is still pendingFlorian Westphal1-0/+5
2023-10-06netfilter: nf_tables: remove busy mark and gc batch APIPablo Neira Ayuso1-95/+3
2023-10-06netfilter: nf_tables: GC transaction API to avoid race with control planePablo Neira Ayuso1-1/+63
2023-08-16netfilter: nf_tables: report use refcount overflowPablo Neira Ayuso1-4/+27
2023-06-28netfilter: nf_tables: reject unbound anonymous set before commit phasePablo Neira Ayuso1-0/+3
2023-06-28netfilter: nf_tables: drop map element references from preparation phasePablo Neira Ayuso1-1/+4
2023-06-28netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chainPablo Neira Ayuso1-0/+2
2023-06-28netfilter: nf_tables: fix chain binding transaction logicPablo Neira Ayuso1-1/+20
2023-06-21netfilter: nf_tables: integrate pipapo into commit protocolPablo Neira Ayuso1-1/+3
2023-05-11netfilter: nf_tables: deactivate anonymous set from preparation phasePablo Neira Ayuso1-0/+1
2023-05-11netfilter: conntrack: fix wrong ct->timeout valueTzung-Bi Shih1-1/+5
2023-04-26netfilter: nf_tables: validate catch-all set elementsPablo Neira Ayuso1-0/+4
2023-03-17netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal1-0/+7
2023-01-12netfilter: nf_tables: honor set timeout and garbage collection updatesPablo Neira Ayuso1-1/+12
2023-01-12netfilter: nf_tables: consolidate set descriptionPablo Neira Ayuso1-0/+12
2022-10-11treewide: use get_random_u32() when possibleJason A. Donenfeld1-1/+1
2022-10-03Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-1/+24
2022-10-03net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.cLorenzo Bianconi1-0/+19
generated by cgit v1.2.3 (git 2.25.1) at 2026-03-25 00:35:44 +0000