aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2024-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-146/+14
2024-07-11netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal1-145/+13
2024-07-11netfilter: nfnetlink_queue: drop bogus WARN_ONFlorian Westphal1-1/+1
2024-07-09Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf...Paolo Abeni5-3/+276
2024-07-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+1
2024-07-04netfilter: nf_tables: unconditionally flush pending work before notifierFlorian Westphal1-2/+1
2024-07-01netfilter: Add bpf_xdp_flow_lookup kfuncLorenzo Bianconi3-1/+127
2024-07-01netfilter: nf_tables: Add flowtable map for xdp offloadFlorian Westphal3-2/+149
2024-07-01Merge tag 'nf-next-24-06-28' of git://git.kernel.org/pub/scm/linux/kernel/git...David S. Miller7-201/+275
2024-06-28netfilter: xt_recent: Lift restrictions on max hitcount valuePhil Sutter1-4/+4
2024-06-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-5/+9
2024-06-27netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso2-5/+6
2024-06-26netfilter: cttimeout: remove 'l3num' attr checkLin Ma1-2/+1
2024-06-26netfilter: nf_conncount: fix wrong variable typeYunjian Wang1-5/+3
2024-06-26ipvs: Avoid unnecessary calls to skb_is_gso_sctpIsmael Luceno1-2/+2
2024-06-25netfilter: nf_tables: do not store nft_ctx in transaction objectsFlorian Westphal2-62/+86
2024-06-25netfilter: nf_tables: pass nft_table to destroy functionFlorian Westphal1-9/+9
2024-06-25netfilter: nf_tables: reduce trans->ctx.chain referencesFlorian Westphal1-9/+7
2024-06-25netfilter: nf_tables: store chain pointer in rule transactionFlorian Westphal2-18/+19
2024-06-25netfilter: nf_tables: avoid usage of embedded nft_ctxFlorian Westphal2-13/+13
2024-06-25netfilter: nf_tables: pass more specific nft_trans_chain where possibleFlorian Westphal1-25/+26
2024-06-25netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal2-10/+9
2024-06-25netfilter: nf_tables: reduce trans->ctx.table referencesFlorian Westphal1-38/+41
2024-06-25netfilter: nf_tables: move bind list_head into relevant subtypesFlorian Westphal1-14/+57
2024-06-25netfilter: nf_tables: make struct nft_trans first member of derived subtypesFlorian Westphal1-5/+13
2024-06-24netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when CONFIG_SYSC...Jianguo Wu1-0/+3
2024-06-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-22/+90
2024-06-19netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter coreJianguo Wu4-17/+84
2024-06-19netfilter: ipset: Fix suspicious rcu_dereference_protected()Jozsef Kadlecsik1-5/+6
2024-06-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-51/+67
2024-06-12net: add and use __skb_get_hash_symmetric_netFlorian Westphal1-1/+2
2024-06-12net: add and use skb_get_hash_netFlorian Westphal1-1/+1
2024-06-11netfilter: ipset: Fix race between namespace cleanup and gc in the list:set typeJozsef Kadlecsik2-51/+60
2024-06-11netfilter: nft_inner: validate mandatory meta and payloadDavide Ornaghi2-0/+7
2024-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-28/+80
2024-05-28ipvs: constify ctl_table arguments of utility functionsThomas Weißschuh1-3/+4
2024-05-29netfilter: nft_fib: allow from forward/input without iif selectorEric Garver1-5/+3
2024-05-29netfilter: nft_payload: skbuff vlan metadata mangle supportPablo Neira Ayuso1-7/+65
2024-05-22net: netfilter: Make ct zone opts configurable for bpf ct helpersBrad Cowie1-13/+55
2024-05-20netfilter: nft_payload: restore vlan q-in-q match supportPablo Neira Ayuso1-16/+7
2024-05-20netfilter: ipset: Add list flush to cancel_gcAlexander Maltsev1-0/+3
2024-05-20netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()Eric Dumazet1-0/+2
2024-05-13Merge tag 'nf-next-24-05-12' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski13-169/+157
2024-05-10netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal7-19/+21
2024-05-10netfilter: nft_set_pipapo: remove dirty flagFlorian Westphal2-27/+0
2024-05-10netfilter: nft_set_pipapo: move cloning of match info to insert/removal pathFlorian Westphal1-21/+49
2024-05-10netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand cloneFlorian Westphal1-7/+10
2024-05-08ipvs: allow some sysctls in non-init user namespacesAlexander Mikhalitsyn1-4/+15
2024-05-08ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthreshAlexander Mikhalitsyn1-7/+7
2024-05-06netfilter: nft_set_pipapo: merge deactivate helper into callerFlorian Westphal1-30/+9