summaryrefslogtreecommitdiff
path: root/include/net/netfilter
AgeCommit message (Expand)Author
2026-04-18netfilter: nft_ct: fix use-after-free in timeout object destroyTuan Do
2026-04-11netfilter: nf_conntrack_expect: store netns and zone in expectationPablo Neira Ayuso
2026-04-11netfilter: nf_conntrack_expect: honor expectation helper fieldPablo Neira Ayuso
2026-04-11netfilter: Reorder fields in 'struct nf_conntrack_expect'Christophe JAILLET
2026-03-25netfilter: nft_set_pipapo: split gc into unlink and reclaim phaseFlorian Westphal
2026-03-25netfilter: nf_tables: de-constify set commit ops function argumentFlorian Westphal
2026-03-04netfilter: nf_conncount: increase the connection clean up limit to 64Fernando Fernandez Mancera
2026-01-11netfilter: nf_conncount: rework API to use sk_buff directlyFernando Fernandez Mancera
2025-07-24netfilter: nf_conntrack: fix crash due to removal of uninitialised entryFlorian Westphal
2025-07-17netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()Eric Dumazet
2025-05-22netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal
2025-05-22netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso
2025-05-22netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal
2025-03-07netfilter: allow exp not to be removed in nf_ct_find_expectationXin Long
2025-01-09netfilter: nft_set_hash: unaligned atomic read on struct nft_set_extPablo Neira Ayuso
2024-09-30netfilter: nft_set_pipapo: walk over current view on netlink dumpPablo Neira Ayuso
2024-09-04netfilter: nf_tables_ipv6: consider network offset in netdev/egress validationPablo Neira Ayuso
2024-09-04netfilter: nf_tables: restore IP sanity checks for netdev/egressPablo Neira Ayuso
2024-08-14netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal
2024-07-05netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso
2024-07-05netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso
2024-06-12netfilter: nft_payload: move struct nft_payload_set definition where it belongsPablo Neira Ayuso
2024-04-27netfilter: flowtable: validate pppoe headerPablo Neira Ayuso
2024-03-06netfilter: let reset rules clean out conntrack entriesFlorian Westphal
2024-03-01netfilter: nft_flow_offload: reset dst in route object after setting up flowPablo Neira Ayuso
2024-03-01netfilter: flowtable: simplify route logicPablo Neira Ayuso
2024-02-05netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEVPablo Neira Ayuso
2024-01-10net/sched: act_ct: Always fill offloading tuple iifidxVlad Buslov
2024-01-10net/sched: act_ct: Take per-cb reference to tcf_ct_flow_tableVlad Buslov
2024-01-10netfilter: flowtable: GC pushes back packets to classic pathPablo Neira Ayuso
2024-01-10net/sched: act_ct: Fix promotion of offloaded unreplied tuplePaul Blakey
2024-01-10netfilter: flowtable: cache info of last offloadVlad Buslov
2024-01-10netfilter: flowtable: allow unidirectional rulesVlad Buslov
2024-01-10netfilter: nf_tables: set transport offset from mac header for netdev/egressPablo Neira Ayuso
2024-01-10netfilter: use skb_ip_totlen and iph_totlenXin Long
2023-11-28netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()Dan Carpenter
2023-11-20netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate e...Jeremy Sowden
2023-10-06netfilter: nf_tables: fix kdoc warnings after gc reworkFlorian Westphal
2023-10-06netfilter: nf_tables: fix memleak when more than 255 elements expiredFlorian Westphal
2023-10-06netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GCPablo Neira Ayuso
2023-10-06netfilter: nf_tables: defer gc run if previous batch is still pendingFlorian Westphal
2023-10-06netfilter: nf_tables: remove busy mark and gc batch APIPablo Neira Ayuso
2023-10-06netfilter: nf_tables: GC transaction API to avoid race with control planePablo Neira Ayuso
2023-08-16netfilter: nf_tables: report use refcount overflowPablo Neira Ayuso
2023-06-28netfilter: nf_tables: reject unbound anonymous set before commit phasePablo Neira Ayuso
2023-06-28netfilter: nf_tables: drop map element references from preparation phasePablo Neira Ayuso
2023-06-28netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chainPablo Neira Ayuso
2023-06-28netfilter: nf_tables: fix chain binding transaction logicPablo Neira Ayuso
2023-06-21netfilter: nf_tables: integrate pipapo into commit protocolPablo Neira Ayuso
2023-05-11netfilter: nf_tables: deactivate anonymous set from preparation phasePablo Neira Ayuso