summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
10 daysMerge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni
11 daysMerge tag 'nf-26-10-19' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski
12 daysMerge tag 'nf-next-26-10-18' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski
13 daysnetfilter: nf_conntrack_netlink: fix inverted IPv6 tuple filterLiu Chao
13 daysnetfilter: flowtable: reset transport header after nf_flow_encap_pop()Lorenzo Bianconi
13 daysnetfilter: xt_dccp: handle reserved options as single-byteSung Byeongchan
13 daysnetfilter: nft_set_rbtree: narrow down range completion to anonymous setsPablo Neira Ayuso
13 daysnetfilter: flowtable: use the vlan id, not the full tci, in the tuple keyShuangfeng He
13 daysipvs: skip committing sync_threshold when proc_dointvec failsJoel Granados
13 daysipvs: fix more races around the overload flagJulian Anastasov
13 daysnetfilter: nft_payload: restrict checksum offsets to known valuesFlorian Westphal
2026-10-18netfilter: flowtable: unify tunnel push for IPv4 and IPv6Lorenzo Bianconi
2026-10-18netfilter: flowtable: add encap_proto to flow_offload_tunnelLorenzo Bianconi
2026-10-18netfilter: flowtable: populate tunnel tuple regardless of inner protocolLorenzo Bianconi
2026-10-18netfilter: flowtable: set inner protocol when popping tunnel headerLorenzo Bianconi
2026-10-18netfilter: nft_compat: restrict raw table targets/matchesFlorian Westphal
2026-10-18netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option manglingFernando Fernandez Mancera
2026-10-18netfilter: nft_exthdr: remove redundant op parsing in tcp_set_initFernando Fernandez Mancera
2026-10-18netfilter: nf_tables: switch chain_types array to rcuFlorian Westphal
2026-10-18netfilter: conntrack: fix unlikely UaF in gc workerFlorian Westphal
2026-10-18netfilter: nf_queue: limit the hook drop flush to the unregistered hook pointAntonio Ojea
2026-10-14ipvs: fix buffer overflow when sending sync messagesJulian Anastasov
2026-10-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-10-08ipv4: validate checksum_start before completing checksumMichael S. Tsirkin
2026-10-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-09-30netfilter: flowtable: restore ieee80211 forward pathPablo Neira Ayuso
2026-09-30netfilter: flowtable: generalize pending status bitPablo Neira Ayuso
2026-09-30netfilter: bpf: reject invalid NAT manipulation typesFernando Fernandez Mancera
2026-09-30netfilter: nft_set_rbtree: skip transaction elements during GCWeiming Shi
2026-09-30ipvs: filter some flags received in the backup serverJulian Anastasov
2026-09-30ipvs: do not create invisible templatesJulian Anastasov
2026-09-30ipvs: bound LBLCR and LBLC cache growthZhiling Zou
2026-09-30ipvs: fix missing counter decrement in lblcJulian Anastasov
2026-09-30netfilter: nft_flow_offload: drop flowtable reference on init error pathAohan Mei
2026-09-27netfilter: conntrack: make filtering by zone discoverableIlya Maximets
2026-09-27netfilter: ctnetlink: fix inverted IPv6 address match in dump filterPiotr Kubik
2026-09-27netfilter: nfnetlink: Fix for interrupted hook dumpsPhil Sutter
2026-09-27netfilter: flowtable: check namespace before iterating flowsQingfang Deng
2026-09-27netfilter: conntrack: Untangle drop and invalid countersPhil Sutter
2026-09-27netfilter: conntrack: Untangle insert_failed counter from othersPhil Sutter
2026-09-27netfilter: fix several typos in commentsHemanth Selam
2026-09-27netfilter: osf: remove unreachable break in nf_osf_ttl()Linkui Xiao
2026-09-27netfilter: ipset: do not update comments from kernel-side addsFlorian Westphal
2026-09-27netfilter: synproxy: fix reset of ct seqadj when reopening a connectionFernando Fernandez Mancera
2026-09-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-09-18netfilter: nf_tables: skip expired catchall elements on insert and deleteAohan Mei
2026-09-18netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_nameNaman Gulati
2026-09-18ipvs: revalidate ihl before icmp_sendJulian Anastasov
2026-09-18netfilter: nft_synproxy: use the family-aware checksum helperKarl Mehltretter
2026-09-18netfilter: nfnetlink_queue: hold nfnl mutex in event notifierFlorian Westphal