summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2026-08-10netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathAlexey Velichayshiy
2026-08-10ipvs: revalidate ihl to prevent out-of-bounds accessJulian Anastasov
2026-08-10ipvs: clear IPv4 options after rebasing tunnel ICMP errorsKyle Zeng
2026-08-10netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet stateFlorian Westphal
2026-08-10netfilter: nf_conntrack: defer invalid log until after unlockZihan Xi
2026-08-10ipvs: separate destination availability stateYizhou Zhao
2026-08-10ipvs: properly update the overload flag on dest editJulian Anastasov
2026-08-10ipvs: add totalconns for destJulian Anastasov
2026-08-10netfilter: ipset: fix refcount race between list:set GC and swapXiang Mei (Microsoft)
2026-08-10netfilter: nft_ct: move custom expectation support to helperPablo Neira Ayuso
2026-08-10netfilter: flowtable: detach layer 2 encapsulation parser from lookupPablo Neira Ayuso
2026-08-10netfilter: flowtable: move ipv4 and ipv6 xmit path to functionPablo Neira Ayuso
2026-08-10netfilter: flowtable: store ethertype in flowtable contextPablo Neira Ayuso
2026-08-10netfilter: flowtable: rename ctx.tun.proto to ctx.tun.inner_protoPablo Neira Ayuso
2026-08-10netfilter: flowtable: rename tun.l3_proto to tun.inner_protoPablo Neira Ayuso
2026-08-10net: netfilter: add ether_type to net_device_path_ctx and use itPablo Neira Ayuso
2026-08-10net: pass net_device_path_ctx to dev_fill_forward_path()Lorenzo Bianconi
2026-08-10netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct()Pablo Neira Ayuso
2026-08-07Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpfLinus Torvalds
2026-08-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-08-05netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()Eric Dumazet
2026-08-01bpf: Fix netns reference imbalance in conntrack kfuncsChengfeng Ye
2026-07-31ipvs: return the csum validation for forward hookJulian Anastasov
2026-07-31ipvs: avoid out-of-bounds write in ip_vs_nat_icmpJulian Anastasov
2026-07-31netfilter: ipset: switch to rcu workFlorian Westphal
2026-07-31netfilter: ipset: add and use mtype_del_cidr_all helperFlorian Westphal
2026-07-31netfilter: ipset: add small wrappers for hash and bucket sizesFlorian Westphal
2026-07-31netfilter: ipset: switch ext_size to atomic64_tJozsef Kadlecsik
2026-07-31netfilter: ipset: rework cidr bookkeepingJozsef Kadlecsik
2026-07-31ipvs: stop estimator after disabled calc phaseZhiling Zou
2026-07-31netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packetsMinghao Zhang
2026-07-31netfilter: nf_tables: call skb_valid_dst() before skb_dst()Pablo Neira Ayuso
2026-07-31netfilter: flowtable: release tunnel route on error when building forward pathPablo Neira Ayuso
2026-07-31net: dsa: stop at the user device in .fill_forward_pathPablo Neira Ayuso
2026-07-31netfilter: flowtable: consolidate flowtable device checkPablo Neira Ayuso
2026-07-31netfilter: flowtable: consolidate net_device field in nft_forward_info structPablo Neira Ayuso
2026-07-31netfilter: conncount: normalize tuple and zone on successful ct lookupFernando Fernandez Mancera
2026-07-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-07-24ipvs: use type-safe allocation helpers in ip_vs_rht_allocSubasri S
2026-07-24netfilter: nf_conntrack_expect: store event cache in expectationPablo Neira Ayuso
2026-07-24netfilter: conntrack_helper: pass master conntrack to helper functionsPablo Neira Ayuso
2026-07-24netfilter: flowtable: tear down flow entries with stale dst from GCPablo Neira Ayuso
2026-07-24netfilter: nf_nat_sip: rewind offset when NAT shrinks the packetFlorian Westphal
2026-07-24netfilter: xt_tcpmss: extend checkentry to ipv6Florian Westphal
2026-07-24ipvs: Move defense_work and est_reload_work to system_dfl_long_wqIsmael Luceno
2026-07-23netfilter: nft_payload: fix mask build for partial field offloadXiang Mei (Microsoft)
2026-07-23ipvs: clear the nfct flag under lockJulian Anastasov
2026-07-23ipvs: do not mangle ICMP replies for non-first fragmentsJulian Anastasov
2026-07-23ipvs: fix places with wrong packet offsetsJulian Anastasov
2026-07-23ipvs: fix the checksum validationsJulian Anastasov