path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2019-08-29netfilter: nf_flow_table: clear skb tstamp before xmitFlorian Westphal-1/+2
2019-08-27netfilter: conntrack: make sysctls per-namespace againFlorian Westphal-0/+5
2019-08-27netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch-1/+1
2019-08-27netfilter: xt_physdev: Fix spurious error message in physdev_mt_checkTodd Seidelmann-4/+2
2019-08-19netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro-11/+25
2019-08-19netfilter: nft_flow_offload: missing netlink attribute policyPablo Neira Ayuso-0/+6
2019-08-18netfilter: nf_tables: map basechain priority to hardware priorityPablo Neira Ayuso-3/+18
2019-08-14netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso-3/+6
2019-08-13netfilter: conntrack: Use consistent ct id hash calculationDirk Morris-8/+8
2019-08-09netfilter: nf_flow_table: teardown flow timeout racePablo Neira Ayuso-9/+25
2019-08-09netfilter: nf_flow_table: conntrack picks up expired flowsPablo Neira Ayuso-7/+10
2019-08-09netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso-5/+10
2019-08-05netfilter: nf_flow_table: fix offload for flows that are subject to xfrmFlorian Westphal-0/+43
2019-07-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik-1/+1
2019-07-29netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac...Stefano Brivio-2/+2
2019-07-29netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets...Stefano Brivio-4/+0
2019-07-25netfilter: nf_tables: Make nft_meta expression more robustPhil Sutter-12/+4
2019-07-19net: flow_offload: add flow_block structure and use itPablo Neira Ayuso-3/+4
2019-07-19Merge git:// S. Miller-64/+84
2019-07-19netfilter: bridge: make NF_TABLES_BRIDGE tristateArnd Bergmann-2/+2
2019-07-18proc/sysctl: add shared variables for range checkMatteo Croce-2/+1
2019-07-18netfilter: nft_meta: skip EAGAIN if nft_meta_bridge is not a modulePablo Neira Ayuso-1/+1
2019-07-18netfilter: synproxy: fix rst sequence number mismatchFernando Fernandez Mancera-2/+2
2019-07-18netfilter: nf_tables: Support auto-loading for inet natPhil Sutter-0/+3
2019-07-16netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana-1/+1
2019-07-16netfilter: nf_tables: don't fail when updating base chain policyFlorian Westphal-0/+2
2019-07-16netfilter: conntrack: always store window size un-scaledFlorian Westphal-3/+5
2019-07-16netfilter: synproxy: fix erroneous tcp mss optionFernando Fernandez Mancera-2/+4
2019-07-16netfilter: nf_tables: fix module autoload for redirChristian Hesse-1/+1
2019-07-16netfilter: Update obsolete comments referring to ip_conntrackYonatan Goldschmidt-14/+7
2019-07-16netfilter: nf_conntrack_sip: fix expectation clashxiao ruizhu-38/+56
2019-07-15netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal-1/+1
2019-07-11Merge git:// Torvalds-512/+2909
2019-07-09netfilter: nf_tables: add hardware offload supportPablo Neira Ayuso-7/+599
2019-07-09Merge tag 'docs-5.3' of git:// Torvalds-8/+8
2019-07-09Merge tag 'leds-for-5.3-rc1' of git:// Torvalds-1/+1
2019-07-08Merge git:// S. Miller-81/+100
2019-07-08Merge git:// S. Miller-76/+472
2019-07-06netfilter: nf_tables: force module load in case select_ops() returns -EAGAINPablo Neira Ayuso-0/+10
2019-07-05netfilter: nf_tables: __nft_expr_type_get() selects specific family typePablo Neira Ayuso-5/+8
2019-07-05netfilter: nf_tables: add nft_expr_type_request_module()Pablo Neira Ayuso-3/+14
2019-07-05netfilter: nft_meta: move bridge meta keys into nft_meta_bridgewenxu-53/+29
2019-07-05ipvs: strip gre tunnel headers from icmp errorsJulian Anastasov-4/+42
2019-07-05netfilter: nf_tables: Add synproxy supportFernando Fernandez Mancera-0/+299
2019-07-04ipvs: allow tunneling with gre encapsulationVadim Fedorenko-3/+64
2019-07-04netfilter: nf_queue: remove unused hook entries pointerFlorian Westphal-6/+4
2019-07-04netfilter: nf_log: Replace a seq_printf() call by seq_puts() in seq_show()Markus Elfring-1/+1
2019-07-04netfilter: rename nf_SYNPROXY.h to nf_synproxy.hPablo Neira Ayuso-1/+1
2019-06-29net: make skb_dst_force return true when dst is refcountedFlorian Westphal-1/+5
2019-06-28Merge git:// S. Miller-80/+95