summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2019-12-04netfilter: nf_tables_offload: skip EBUSY on chain updatePablo Neira Ayuso1-1/+2
2019-12-04netfilter: nf_tables: bogus EOPNOTSUPP on basechain updatePablo Neira Ayuso1-0/+1
2019-12-04netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICTJozsef Kadlecsik3-13/+30
2019-11-12netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 setsStefano Brivio1-1/+1
2019-11-12netfilter: nft_payload: fix missing check for matching length in offloadswenxu1-0/+38
2019-11-12ipvs: move old_secure_tcp into struct netns_ipvsEric Dumazet1-8/+7
2019-11-12ipvs: don't ignore errors in case refcounting ip_vs module failsDavide Caratti5-17/+28
2019-11-12netfilter: nf_flow_table: set timeout before insertion into hashesPablo Neira Ayuso1-1/+2
2019-11-12netfilter: ipset: Fix an error code in ip_set_sockfn_get()Dan Carpenter1-3/+5
2019-11-06netfilter: conntrack: avoid possible false sharingEric Dumazet1-2/+2
2019-10-29netfilter: nft_connlimit: disable bh on garbage collectionPablo Neira Ayuso1-1/+6
2019-10-11netfilter: nf_tables: allow lookups in dynamic setsFlorian Westphal2-5/+5
2019-09-03netfilter: nf_flow_table: set default timeout after successful insertionPablo Neira Ayuso1-1/+1
2019-09-03netfilter: ctnetlink: honor IPS_OFFLOAD flagPablo Neira Ayuso1-2/+5
2019-09-03netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 modu...Leonardo Bras1-0/+3
2019-09-02netfilter: nft_socket: fix erroneous socket assignmentFernando Fernandez Mancera1-3/+3
2019-08-29netfilter: nf_flow_table: clear skb tstamp before xmitFlorian Westphal1-1/+2
2019-08-27netfilter: conntrack: make sysctls per-namespace againFlorian Westphal1-0/+5
2019-08-27netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch1-1/+1
2019-08-27netfilter: xt_physdev: Fix spurious error message in physdev_mt_checkTodd Seidelmann1-4/+2
2019-08-19netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro1-11/+25
2019-08-19netfilter: nft_flow_offload: missing netlink attribute policyPablo Neira Ayuso1-0/+6
2019-08-18netfilter: nf_tables: map basechain priority to hardware priorityPablo Neira Ayuso2-3/+18
2019-08-14netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso1-3/+6
2019-08-13netfilter: conntrack: Use consistent ct id hash calculationDirk Morris1-8/+8
2019-08-09netfilter: nf_flow_table: teardown flow timeout racePablo Neira Ayuso1-9/+25
2019-08-09netfilter: nf_flow_table: conntrack picks up expired flowsPablo Neira Ayuso1-7/+10
2019-08-09netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso1-5/+10
2019-08-05netfilter: nf_flow_table: fix offload for flows that are subject to xfrmFlorian Westphal1-0/+43
2019-07-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik1-1/+1
2019-07-29netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac...Stefano Brivio2-2/+2
2019-07-29netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets...Stefano Brivio1-4/+0
2019-07-25netfilter: nf_tables: Make nft_meta expression more robustPhil Sutter1-12/+4
2019-07-19net: flow_offload: add flow_block structure and use itPablo Neira Ayuso2-3/+4
2019-07-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller34-64/+84
2019-07-19netfilter: bridge: make NF_TABLES_BRIDGE tristateArnd Bergmann2-2/+2
2019-07-18proc/sysctl: add shared variables for range checkMatteo Croce1-2/+1
2019-07-18netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a modulePablo Neira Ayuso1-1/+1
2019-07-18netfilter: synproxy: fix rst sequence number mismatchFernando Fernandez Mancera1-2/+2
2019-07-18netfilter: nf_tables: Support auto-loading for inet natPhil Sutter1-0/+3
2019-07-16netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana1-1/+1
2019-07-16netfilter: nf_tables: don't fail when updating base chain policyFlorian Westphal1-0/+2
2019-07-16netfilter: conntrack: always store window size un-scaledFlorian Westphal1-3/+5
2019-07-16netfilter: synproxy: fix erroneous tcp mss optionFernando Fernandez Mancera2-2/+4
2019-07-16netfilter: nf_tables: fix module autoload for redirChristian Hesse1-1/+1
2019-07-16netfilter: Update obsolete comments referring to ip_conntrackYonatan Goldschmidt6-14/+7
2019-07-16netfilter: nf_conntrack_sip: fix expectation clashxiao ruizhu18-38/+56
2019-07-15netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal1-1/+1
2019-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds69-512/+2909
2019-07-09netfilter: nf_tables: add hardware offload supportPablo Neira Ayuso7-7/+599