- bd1777b netfilter: nftables: bogus check for netlink portID with table owner by Pablo Neira Ayuso · 4 years ago
- 2888b08 netfilter: nftables: fix possible double hook unregistration with table owner by Pablo Neira Ayuso · 4 years ago
- 9cc0001 netfilter: nftables: disallow updates on table ownership by Pablo Neira Ayuso · 4 years ago
- 8e24edd netfilter: x_tables: gpf inside xt_find_revision() by Vasily Averin · 4 years ago
- 07b5a76 netfilter: conntrack: avoid misleading 'invalid' in log message by Florian Westphal · 4 years ago
- 03a3ca3 netfilter: nf_nat: undo erroneous tcp edemux lookup by Florian Westphal · 4 years ago
- c57ea2d netfilter: conntrack: Remove a double space in a log message by Klemen Košir · 4 years, 1 month ago
- 6001a93 netfilter: nftables: introduce table ownership by Pablo Neira Ayuso · 4 years, 1 month ago
- 00dfe9b netfilter: nftables: add helper function to release hooks of one single table by Pablo Neira Ayuso · 4 years, 1 month ago
- fd02033 netfilter: nftables: add helper function to release one table by Pablo Neira Ayuso · 4 years, 1 month ago
- dc9d875 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by David S. Miller · 4 years, 1 month ago
- 664899e netfilter: nftables: relax check for stateful expressions in set definition by Pablo Neira Ayuso · 4 years, 1 month ago
- 0799828 netfilter: conntrack: skip identical origin tuple in same zone only by Florian Westphal · 4 years, 1 month ago
- c273a20 Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next by Jakub Kicinski · 4 years, 1 month ago
- 626899a netfilter: nftables: remove redundant assignment of variable err by Colin Ian King · 4 years, 1 month ago
- edf597d netfilter: move handlers to net/ip_vs.h by Leon Romanovsky · 4 years, 1 month ago
- 8d6bca1 netfilter: flowtable: fix tcp and udp header checksum update by Sven Auhagen · 4 years, 1 month ago
- 767d121 netfilter: nftables: fix possible UAF over chains from packet path in netns by Pablo Neira Ayuso · 4 years, 1 month ago
- b1bdde3 netfilter: xt_recent: Fix attempt to update deleted entry by Jozsef Kadlecsik · 4 years, 1 month ago
- c358f95 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 4 years, 1 month ago
- 864e898 net: remove redundant 'depends on NET' by Masahiro Yamada · 4 years, 1 month ago
- 08a01c1 netfilter: nftables: statify nft_parse_register() by Pablo Neira Ayuso · 4 years, 1 month ago
- 345023b netfilter: nftables: add nft_parse_register_store() and use it by Pablo Neira Ayuso · 4 years, 1 month ago
- 4f16d25 netfilter: nftables: add nft_parse_register_load() and use it by Pablo Neira Ayuso · 4 years, 1 month ago
- dbc859d netfilter: flowtable: add hash offset field to tuple by Pablo Neira Ayuso · 4 years, 1 month ago
- 012da53 ipvs: add weighted random twos choice algorithm by Darby Payne · 4 years, 2 months ago
- 83ace77 netfilter: ctnetlink: remove get_ct indirection by Florian Westphal · 4 years, 2 months ago
- ce53799 netfilter: nft_dynset: dump expressions when set definition contains no expressions by Pablo Neira Ayuso · 4 years, 2 months ago
- 0c5b7a5 netfilter: nft_dynset: add timeout extension to template by Pablo Neira Ayuso · 4 years, 2 months ago
- fca05d4 netfilter: nft_dynset: honor stateful expressions in set definition by Pablo Neira Ayuso · 4 years, 2 months ago
- 869f4fd netfilter: nf_nat: Fix memleak in nf_nat_init by Dinghao Liu · 4 years, 2 months ago
- f6351c3 netfilter: conntrack: fix reading nf_conntrack_buckets by Jesper Dangaard Brouer · 4 years, 2 months ago
- b4e70d8 netfilter: nftables: add set expression flags by Pablo Neira Ayuso · 4 years, 2 months ago
- 95cd4bc netfilter: nft_dynset: report EOPNOTSUPP on missing set feature by Pablo Neira Ayuso · 4 years, 2 months ago
- 6cb5621 netfilter: xt_RATEEST: reject non-null terminated string from userspace by Florian Westphal · 4 years, 3 months ago
- 1e72fae Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf by Jakub Kicinski · 4 years, 3 months ago
- 5c8193f netfilter: ipset: fix shift-out-of-bounds in htable_bits() by Vasily Averin · 4 years, 3 months ago
- 2b33d6f netfilter: ipset: fixes possible oops in mtype_resize by Vasily Averin · 4 years, 3 months ago
- ca5b877 Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 3 months ago
- 161b838 netfilter: nftables: fix incorrect increment of loop counter by Colin Ian King · 4 years, 3 months ago
- 7bca502 Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next by Jakub Kicinski · 4 years, 3 months ago
- 48b0ae0 netfilter: nftables: netlink support for several set element expressions by Pablo Neira Ayuso · 4 years, 3 months ago
- 563125a netfilter: nftables: generalize set extension to support for several expressions by Pablo Neira Ayuso · 4 years, 3 months ago
- 8cfd9b0f netfilter: nftables: generalize set expressions support by Pablo Neira Ayuso · 4 years, 3 months ago
- 86d21fc netfilter: ctnetlink: add timeout and protoinfo to destroy events by Florian Westphal · 4 years, 3 months ago
- 46d5e62 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 4 years, 3 months ago
- 2d94b20 netfilter: nft_ct: Remove confirmation check for NFT_CT_ID by Brett Mastbergen · 4 years, 3 months ago
- 42f1c27 netfilter: nftables: comment indirect serialization of commit_mutex with rtnl_mutex by Pablo Neira Ayuso · 4 years, 3 months ago
- 917d80d netfilter: nft_dynset: fix timeouts later than 23 days by Pablo Neira Ayuso · 4 years, 3 months ago
- cc00bca netfilter: x_tables: Switch synchronization to RCU by Subash Abhinov Kasiviswanathan · 4 years, 4 months ago
- 55fd59b Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 4 years, 3 months ago
- 0429587 netfilter: use actual socket sk for REJECT action by Jan Engelhardt · 4 years, 4 months ago
- f7583f0 netfilter: nfnl_acct: remove data from struct net by Wang Shanker · 4 years, 4 months ago
- 0ef083d netfilter: Remove unnecessary conversion to bool by Kaixu Xia · 4 years, 4 months ago
- a5d45bc netfilter: nftables_offload: build mask based from the matching bytes by Pablo Neira Ayuso · 4 years, 4 months ago
- 3c78e9e netfilter: nftables_offload: set address type in control dissector by Pablo Neira Ayuso · 4 years, 4 months ago
- 4bc3c8d ipvs: fix possible memory leak in ip_vs_control_net_init by Wang Hai · 4 years, 4 months ago
- c0700df netfilter: nf_tables: avoid false-postive lockdep splat by Florian Westphal · 4 years, 4 months ago
- 68ad89d netfilter: ipset: prevent uninit-value in hash_ip6_add by Eric Dumazet · 4 years, 4 months ago
- 3df98d7 lsm,selinux: pass flowi_common instead of flowi to the LSM hooks by Paul Moore · 4 years, 5 months ago
- 988187e ipvs: replace atomic_add_return() by Yejune Deng · 4 years, 4 months ago
- e2ef520 net: openvswitch: Be liberal in tcp conntrack. by Numan Siddique · 4 years, 4 months ago
- 872f690 treewide: rename nla_strlcpy to nla_strscpy. by Francis Laniel · 4 years, 4 months ago
- ae0d0bb Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 4 years, 4 months ago
- 117ca1f8 netfilter: nft_reject_inet: allow to use reject from inet ingress by Pablo Neira Ayuso · 4 years, 4 months ago
- 35b7ee3 netfilter: nftables: Add __printf() attribute by Andrew Lunn · 4 years, 4 months ago
- 3976ca1 netfilter: ipset: Expose the initval hash parameter to userspace by Jozsef Kadlecsik · 4 years, 4 months ago
- ccf0a4b netfilter: ipset: Add bucketsize parameter to all hash types by Jozsef Kadlecsik · 4 years, 4 months ago
- a304ea7 netfilter: ipset: Support the -exist flag with the destroy command by Jozsef Kadlecsik · 4 years, 4 months ago
- 7d10e62 netfilter: ipset: Update byte and packet counters regardless of whether they match by Stefano Brivio · 4 years, 4 months ago
- 6bbb9ad netfilter: nft_reject: add reject verdict support for netdev by Jose M. Guisado Gomez · 4 years, 5 months ago
- 312ca57 netfilter: nft_reject: unify reject init and dump into nft_reject by Jose M. Guisado Gomez · 4 years, 5 months ago
- c0391b6 netfilter: nf_tables: missing validation from the abort path by Pablo Neira Ayuso · 4 years, 4 months ago
- 46d6c5a netfilter: use actual socket sk rather than skb sk when routing harder by Jason A. Donenfeld · 4 years, 4 months ago
- dceabab netfilter: nftables: fix netlink report logic in flowtable and genid by Pablo Neira Ayuso · 4 years, 5 months ago
- c77761c netfilter: nf_fwd_netdev: clear timestamp in forwarding path by Pablo Neira Ayuso · 4 years, 5 months ago
- 31cc578 netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create by Saeed Mirzamohammadi · 4 years, 5 months ago
- 4f25434 netfilter: conntrack: connection timeout after re-register by Francesco Ruggeri · 4 years, 5 months ago
- 79dce09 ipvs: adjust the debug info in function set_tcp_state by longguang.yue · 4 years, 5 months ago
- 2295cdd Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 4 years, 5 months ago
- 346e320 netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements by Davide Caratti · 4 years, 5 months ago
- d25e2e9 netfilter: restore NF_INET_NUMHOOKS by Pablo Neira Ayuso · 4 years, 5 months ago
- 0d9826b netfilter: nf_log: missing vlan offload tag and proto by Pablo Neira Ayuso · 4 years, 5 months ago
- 98a381a netfilter: nftables: extend error reporting for chain updates by Pablo Neira Ayuso · 4 years, 5 months ago
- 7980d2e ipvs: clear skb->tstamp in forwarding path by Julian Anastasov · 4 years, 5 months ago
- 793d5d6 netfilter: flowtable: reduce calls to pskb_may_pull() by Pablo Neira Ayuso · 4 years, 5 months ago
- d3519cb netfilter: nf_tables: add inet ingress support by Pablo Neira Ayuso · 4 years, 5 months ago
- 60a3815 netfilter: add inet ingress support by Pablo Neira Ayuso · 4 years, 5 months ago
- ddcfa71 netfilter: add nf_ingress_hook() helper function by Pablo Neira Ayuso · 4 years, 5 months ago
- afd9024 netfilter: add nf_static_key_{inc,dec} by Pablo Neira Ayuso · 4 years, 5 months ago
- 073b04e ipvs: inspect reply packets from DR/TUN real servers by longguang.yue · 4 years, 5 months ago
- 321e921 Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next by David S. Miller · 4 years, 5 months ago
- 10fdd6d netfilter: nf_tables: Implement fast bitwise expression by Phil Sutter · 4 years, 5 months ago
- 5f48846 netfilter: nf_tables: Enable fast nft_cmp for inverted matches by Phil Sutter · 4 years, 5 months ago
- ab6c41e netfilter: nfnetlink: place subsys mutexes in distinct lockdep classes by Florian Westphal · 4 years, 5 months ago
- 9446ab3 netfilter: ipset: enable memory accounting for ipset allocations by Vasily Averin · 4 years, 6 months ago
- 82ec663 netfilter: nf_tables_offload: Remove unused macro FLOW_SETUP_BLOCK by YueHaibing · 4 years, 6 months ago
- 66a9b92 genetlink: move to smaller ops wherever possible by Jakub Kicinski · 4 years, 5 months ago
- 002f217 netfilter: nf_tables: add userdata attributes to nft_chain by Jose M. Guisado Gomez · 4 years, 5 months ago
- 85db827 netfilter: nf_tables: use nla_memdup to copy udata by Jose M. Guisado Gomez · 4 years, 5 months ago