Commits · f998b6b10144cd9809da6af02758615f789e8aa1 · jan.koester / Linux · GitLab

Jan 08, 2018
- netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit() · f998b6b1
  Jozsef Kadlecsik authored Jan 06, 2018
  f998b6b1
- netfilter: ipset: Fix "don't update counters" mode when counters used at the matching · 4750005a
  Jozsef Kadlecsik authored Jan 06, 2018
  4750005a
- netfilter: ipset: use swap macro instead of _manually_ swapping values · c0453377
  Gustavo A. R. Silva authored Oct 30, 2017
  c0453377
- netfilter: nf_tables: flow offload expression · a3c90f7a
  Pablo Neira Ayuso authored Jan 07, 2018
  a3c90f7a
- netfilter: flow table support for the mixed IPv4/IPv6 family · 7c23b629
  Pablo Neira Ayuso authored Jan 07, 2018
  7c23b629
- netfilter: flow table support for IPv6 · 09952107
  Pablo Neira Ayuso authored Jan 07, 2018
  09952107
- netfilter: flow table support for IPv4 · 97add9f0
  Pablo Neira Ayuso authored Jan 07, 2018
  97add9f0
- netfilter: add generic flow table infrastructure · ac2a6666
  Pablo Neira Ayuso authored Jan 07, 2018
  ac2a6666
- netfilter: nf_tables: add flow table netlink frontend · 3b49e2e9
  Pablo Neira Ayuso authored Jan 07, 2018
  3b49e2e9
- netfilter: nf_conntrack: add IPS_OFFLOAD status bit · 90964016
  Pablo Neira Ayuso authored Jan 07, 2018
  90964016
- netfilter: nf_tables: remove nft_dereference() · 0befd061
  Pablo Neira Ayuso authored Jan 02, 2018
  0befd061
- netfilter: remove defensive check on malformed packets from raw sockets · a7f87b47
  Pablo Neira Ayuso authored Dec 30, 2017
  a7f87b47
- netfilter: meta: secpath support · f6931f5f
  Florian Westphal authored Dec 06, 2017
  f6931f5f
- netfilter: remove struct nf_afinfo and its helper functions · b3a61254
  Pablo Neira Ayuso authored Dec 09, 2017
  b3a61254
- netfilter: remove route_key_size field in struct nf_afinfo · 46435623
  Pablo Neira Ayuso authored Nov 27, 2017
  46435623
- netfilter: move reroute indirection to struct nf_ipv6_ops · ce388f45
  Pablo Neira Ayuso authored Nov 27, 2017
  ce388f45
- netfilter: move route indirection to struct nf_ipv6_ops · 3f87c08c
  Pablo Neira Ayuso authored Nov 27, 2017
  3f87c08c
- netfilter: remove saveroute indirection in struct nf_afinfo · 7db9a51e
  Pablo Neira Ayuso authored Dec 20, 2017
  7db9a51e
- netfilter: move checksum_partial indirection to struct nf_ipv6_ops · f7dcbe2f
  Pablo Neira Ayuso authored Dec 20, 2017
  f7dcbe2f
- netfilter: move checksum indirection to struct nf_ipv6_ops · ef71fe27
  Pablo Neira Ayuso authored Nov 27, 2017
  ef71fe27
- netfilter: connlimit: split xt_connlimit into front and backend · 625c5561
  Florian Westphal authored Dec 09, 2017
  625c5561
- netfilter: nf_tables: remove hooks from family definition · c2f9eafe
  Pablo Neira Ayuso authored Dec 09, 2017
  c2f9eafe
- netfilter: nf_tables: remove multihook chains and families · c974a3a3
  Pablo Neira Ayuso authored Dec 09, 2017
  c974a3a3
- netfilter: nf_tables_inet: don't use multihook infrastructure anymore · 12355d36
  Pablo Neira Ayuso authored Dec 09, 2017
  12355d36
- netfilter: core: support for NFPROTO_INET hook registration · cb7ccd83
  Pablo Neira Ayuso authored Dec 09, 2017
  cb7ccd83
- netfilter: core: pass family as parameter to nf_remove_net_hook() · 30259408
  Pablo Neira Ayuso authored Dec 09, 2017
  30259408
- netfilter: core: pass hook number, family and device to nf_find_hook_list() · 62a0fe46
  Pablo Neira Ayuso authored Dec 09, 2017
  62a0fe46
- netfilter: core: add nf_remove_net_hook · 3d3cdc38
  Pablo Neira Ayuso authored Dec 09, 2017
  3d3cdc38
- netfilter: nf_tables: add nft_set_is_anonymous() helper · 408070d6
  Pablo Neira Ayuso authored Nov 24, 2017
  408070d6
- netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path · 7a4473a3
  Pablo Neira Ayuso authored Dec 10, 2017
  7a4473a3
- netfilter: nf_tables_arp: don't set forward chain · fa45a760
  Pablo Neira Ayuso authored Dec 10, 2017
  fa45a760
- netfilter: nf_tables: reject nat hook registration if prio is before conntrack · 84ba7dd7
  Florian Westphal authored Dec 08, 2017
  84ba7dd7
- netfilter: core: only allow one nat hook per hook point · f92b40a8
  Florian Westphal authored Dec 08, 2017
  f92b40a8
- netfilter: xtables: add and use xt_request_find_table_lock · 03d13b68
  Florian Westphal authored Dec 08, 2017
  03d13b68
- netfilter: reduce NF_MAX_HOOKS define · 256d94ba
  Florian Westphal authored Dec 07, 2017
  256d94ba
- netfilter: don't allocate space for arp/bridge hooks unless needed · 2a95183a
  Florian Westphal authored Dec 07, 2017
  2a95183a
- netfilter: don't allocate space for decnet hooks unless needed · bb4badf3
  Florian Westphal authored Dec 07, 2017
  bb4badf3
- netfilter: reduce hook array sizes to what is needed · ef57170b
  Florian Westphal authored Dec 07, 2017
  ef57170b
- netfilter: add defines for arp/decnet max hooks · e58f33cc
  Florian Westphal authored Dec 07, 2017
  e58f33cc
- netfilter: reduce size of hook entry point locations · b0f38338
  Florian Westphal authored Dec 03, 2017
  b0f38338