summaryrefslogtreecommitdiffstats
path: root/net/ipv6/netfilter
AgeCommit message (Expand)AuthorLines
2025-09-11netfilter: nf_reject: don't reply to icmp error messagesFlorian Westphal-0/+30
2025-09-02netfilter: nf_reject: remove unneeded exportsFlorian Westphal-12/+25
2025-08-25tcp: Don't pass hashinfo to socket lookup helpers.Kuniyuki Iwashima-5/+3
2025-08-21netfilter: nf_reject: don't leak dst refcount for loopback packetsFlorian Westphal-3/+2
2025-08-07netfilter: add back NETFILTER_XTABLES dependenciesArnd Bergmann-0/+1
2025-07-25netfilter: Exclude LEGACY TABLES on PREEMPT_RT.Pablo Neira Ayuso-10/+9
2025-07-02ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpersEric Dumazet-1/+1
2025-07-02ipv6: adopt dst_dev() helperEric Dumazet-1/+1
2025-06-08treewide, timers: Rename from_timer() to timer_container_of()Ingo Molnar-1/+1
2025-05-23netfilter: nf_dup{4, 6}: Move duplication check to task_structSebastian Andrzej Siewior-4/+4
2025-05-23netfilter: nf_tables: nft_fib: consistent l3mdev handlingFlorian Westphal-3/+1
2025-05-22netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancyFlorian Westphal-4/+9
2025-03-25Merge tag 'nf-next-25-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski-9/+33
2025-03-23netfilter: socket: Lookup orig tuple for IPv6 SNATMaxim Mikityanskiy-0/+23
2025-03-21netfilter: fib: avoid lookup if socket is availableFlorian Westphal-9/+10
2025-03-18inet: frags: save a pair of atomic operations in reassemblyEric Dumazet-1/+4
2025-03-18inet: frags: change inet_frag_kill() to defer refcount updatesEric Dumazet-9/+12
2025-03-18inet: frags: add inet_frag_putn() helperEric Dumazet-1/+2
2024-11-07Merge tag 'nf-next-24-11-07' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni-1/+8
2024-10-30netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()Eric Dumazet-8/+7
2024-10-15netfilter: Make legacy configs user selectableBreno Leitao-1/+8
2024-10-09netfilter: fib: check correct rtable in vrf setupsFlorian Westphal-2/+3
2024-09-27netfilter: nf_tables: prevent nf_skb_duplicated corruptionEric Dumazet-2/+5
2024-09-26Merge tag 'nf-24-09-26' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Paolo Abeni-3/+2
2024-09-26netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=nSimon Horman-3/+2
2024-09-19netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()Eric Dumazet-12/+2
2024-09-03netfilter: Use kmemdup_array instead of kmemdup for multiple allocationYan Zhen-1/+1
2024-08-20netfilter: nf_tables: pass context structure to nft_parse_register_loadFlorian Westphal-2/+2
2024-08-14netfilter: allow ipv6 fragments to arrive on different devicesTom Hughes-0/+4
2024-07-31netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().Kuniyuki Iwashima-5/+9
2024-05-23net: Rename mono_delivery_time to tstamp_type for scalabiltyAbhishek Chauhan-1/+1
2024-05-06netfilter: use NF_DROP instead of -NF_DROPJason Xing-1/+1
2024-05-03netfilter: Remove the now superfluous sentinel elements from ctl_table arrayJoel Granados-1/+0
2024-04-22sysctl: treewide: constify ctl_table_header::ctl_table_argThomas Weißschuh-1/+1
2024-04-10netfilter: complete validation of user inputEric Dumazet-0/+4
2024-04-04netfilter: validate user input for expected lengthEric Dumazet-0/+4
2024-03-28inet: inet_defrag: prevent sk release while still in useFlorian Westphal-1/+1
2024-03-04net: adopt skb_network_offset() and similar helpersEric Dumazet-2/+2
2024-03-01ipv6: annotate data-races around cnf.hop_limitEric Dumazet-2/+2
2024-01-29netfilter: xtables: allow xtables-nft only buildsFlorian Westphal-7/+15
2024-01-17netfilter: bridge: replace physindev with physinif in nf_bridge_infoPavel Tikhomirov-3/+8
2024-01-17netfilter: propagate net to nf_bridge_get_physindevPavel Tikhomirov-1/+1
2023-11-08netfilter: add missing module descriptionsFlorian Westphal-0/+4
2023-10-18netfilter: xt_mangle: only check verdict part of return valueFlorian Westphal-4/+5
2023-08-29Merge tag 'sysctl-6.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/m...Linus Torvalds-1/+2
2023-08-15netfilter: Update to register_net_sysctl_szJoel Granados-1/+2
2023-07-28netfilter: defrag: Add glue hooks for enabling/disabling defragDaniel Xu-0/+11
2023-03-22xtables: move icmp/icmpv6 logic to xt_tcpudpFlorian Westphal-67/+1
2023-03-06netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal-1/+1
2023-02-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski-3/+8