summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2026-07-31ipvs: avoid out-of-bounds write in ip_vs_nat_icmpJulian Anastasov
2026-07-31netfilter: ipset: switch to rcu workFlorian Westphal
2026-07-31netfilter: ipset: add and use mtype_del_cidr_all helperFlorian Westphal
2026-07-31netfilter: ipset: add small wrappers for hash and bucket sizesFlorian Westphal
2026-07-31netfilter: ipset: switch ext_size to atomic64_tJozsef Kadlecsik
2026-07-31netfilter: ipset: rework cidr bookkeepingJozsef Kadlecsik
2026-07-31ipvs: stop estimator after disabled calc phaseZhiling Zou
2026-07-31netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packetsMinghao Zhang
2026-07-31netfilter: nf_tables: call skb_valid_dst() before skb_dst()Pablo Neira Ayuso
2026-07-31netfilter: flowtable: release tunnel route on error when building forward pathPablo Neira Ayuso
2026-07-31net: dsa: stop at the user device in .fill_forward_pathPablo Neira Ayuso
2026-07-31netfilter: flowtable: consolidate flowtable device checkPablo Neira Ayuso
2026-07-31netfilter: flowtable: consolidate net_device field in nft_forward_info structPablo Neira Ayuso
2026-07-31netfilter: conncount: normalize tuple and zone on successful ct lookupFernando Fernandez Mancera
2026-07-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-07-24ipvs: use type-safe allocation helpers in ip_vs_rht_allocSubasri S
2026-07-24netfilter: nf_conntrack_expect: store event cache in expectationPablo Neira Ayuso
2026-07-24netfilter: conntrack_helper: pass master conntrack to helper functionsPablo Neira Ayuso
2026-07-24netfilter: flowtable: tear down flow entries with stale dst from GCPablo Neira Ayuso
2026-07-24netfilter: nf_nat_sip: rewind offset when NAT shrinks the packetFlorian Westphal
2026-07-24netfilter: xt_tcpmss: extend checkentry to ipv6Florian Westphal
2026-07-24ipvs: Move defense_work and est_reload_work to system_dfl_long_wqIsmael Luceno
2026-07-23netfilter: nft_payload: fix mask build for partial field offloadXiang Mei (Microsoft)
2026-07-23ipvs: clear the nfct flag under lockJulian Anastasov
2026-07-23ipvs: do not mangle ICMP replies for non-first fragmentsJulian Anastasov
2026-07-23ipvs: fix places with wrong packet offsetsJulian Anastasov
2026-07-23ipvs: fix the checksum validationsJulian Anastasov
2026-07-23netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCHPablo Neira Ayuso
2026-07-23netfilter: nf_tables: make nft_object rhltable per tablePablo Neira Ayuso
2026-07-23ipvs: adjust double hashing when fwd method changesJulian Anastasov
2026-07-23ipvs: do not propagate one-packet flag to synced connsZhiling Zou
2026-07-23netfilter: ipset: do not update comments from kernel-side hash addsDavid Lee
2026-07-22netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()Pablo Neira Ayuso
2026-07-22netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()Xiang Mei
2026-07-22Merge branch 'big-tcp-for-udp-tunnels'Paolo Abeni
2026-07-22udp: Support BIG TCP GSO packets where they can occurAlice Mikityanska
2026-07-22net: Use helpers to get/set UDP len tree-wideAlice Mikityanska
2026-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni
2026-07-10netfilter: xt_physdev: masks are not c-stringsFlorian Westphal
2026-07-10ipvs: fix more places with wrong ipv6 transport offsetsJulian Anastasov
2026-07-10ipvs: reload ip header after head reallocationFlorian Westphal
2026-07-10netfilter: flowtable: use correct direction to set up tunnel routePablo Neira Ayuso
2026-07-10netfilter: nf_conncount: fix zone comparison in tuple dedupYizhou Zhao
2026-07-10netfilter: ecache: fix inverted time_after() checkYizhou Zhao
2026-07-10netfilter: xt_nat: reject unsupported target familiesWyatt Feng
2026-07-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni
2026-07-08ipvs: ensure inner headers in ICMP errors are in headroomJulian Anastasov
2026-07-08ipvs: use parsed transport offset in SCTP state lookupYizhou Zhao
2026-07-08ipvs: use parsed transport offset in TCP state lookupYizhou Zhao
2026-07-08ipvs: pass parsed transport offset to state handlersYizhou Zhao