aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/Kconfig
AgeCommit message (Expand)AuthorFilesLines
2024-01-29netfilter: xtables: allow xtables-nft only buildsFlorian Westphal1-6/+6
2023-04-21bpf: add bpf_link support for BPF_NETFILTER programsFlorian Westphal1-0/+3
2023-03-22netfilter: xtables: disable 32bit compat interface by defaultFlorian Westphal1-1/+0
2023-02-10net: create nf_conntrack_ovs for ovs and tc useXin Long1-0/+3
2022-12-12net: move the nat function to nf_nat_ovs for ovs and tcXin Long1-0/+3
2022-10-25netfilter: nft_objref: make it builtinFlorian Westphal1-6/+0
2022-08-17netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to yGeert Uytterhoeven1-1/+0
2022-08-05netfilter: flowtable: fix incorrect Kconfig dependenciesPablo Neira Ayuso1-2/+1
2022-07-11netfilter: nf_flow_table: count pending offload workqueue tasksVlad Buslov1-0/+9
2021-12-23netfilter: nf_tables: make counter support built-inPablo Neira Ayuso1-6/+0
2021-10-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-1/+1
2021-10-14netfilter: Introduce egress hookLukas Wunner1-0/+11
2021-10-07netfilter: Kconfig: use 'default y' instead of 'm' for bool config optionVegard Nossum1-1/+1
2021-06-09netfilter: nfnetlink_hook: add depends-on nftablesFlorian Westphal1-0/+1
2021-06-07netfilter: add new hook nfnl subsystemFlorian Westphal1-0/+9
2021-05-29netfilter: Remove leading spaces in KconfigJuerg Haefliger1-1/+1
2021-04-26netfilter: allow to turn off xtables compat layerFlorian Westphal1-0/+10
2021-03-31netfilter: nf_log_common: merge with nf_log_syslogFlorian Westphal1-6/+2
2021-03-31netfilter: nf_log_netdev: merge with nf_log_syslogFlorian Westphal1-4/+0
2021-03-31netfilter: nf_log_ipv4: rename to nf_log_syslogFlorian Westphal1-1/+13
2021-01-27net: remove redundant 'depends on NET'Masahiro Yamada1-1/+1
2020-10-31netfilter: nft_reject: add reject verdict support for netdevJose M. Guisado Gomez1-0/+10
2020-10-15netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statementsDavide Caratti1-0/+1
2020-07-29netfilter: Replace HTTP links with HTTPS onesAlexander A. Klimov1-1/+1
2020-06-14treewide: replace '---help---' in Kconfig files with 'help'Masahiro Yamada1-29/+29
2020-04-30docs: networking: convert tproxy.txt to ReSTMauro Carvalho Chehab1-1/+1
2020-03-18netfilter: revert introduction of egress hookDaniel Borkmann1-8/+0
2020-03-18netfilter: Introduce egress hookLukas Wunner1-0/+8
2020-03-15netfilter: nf_tables: make sets built-inFlorian Westphal1-8/+0
2019-09-26net: Fix Kconfig indentationKrzysztof Kozlowski1-1/+1
2019-09-13netfilter: fix coding-style errors.Jeremy Sowden1-4/+4
2019-07-16netfilter: Update obsolete comments referring to ip_conntrackYonatan Goldschmidt1-4/+2
2019-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-0/+11
2019-07-09Merge tag 'docs-5.3' of git://git.lwn.net/linuxLinus Torvalds1-8/+8
2019-07-09Merge tag 'leds-for-5.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-1/+1
2019-07-05netfilter: nf_tables: Add synproxy supportFernando Fernandez Mancera1-0/+11
2019-06-28docs: leds: convert to ReSTMauro Carvalho Chehab1-1/+1
2019-06-14docs: kbuild: convert docs to ReST and rename to *.rstMauro Carvalho Chehab1-8/+8
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner1-0/+1
2019-04-11netfilter: x_tables: merge ip and ipv6 masquerade modulesFlorian Westphal1-0/+14
2019-04-08netfilter: replace NF_NAT_NEEDED with IS_ENABLED(CONFIG_NF_NAT)Florian Westphal1-5/+0
2019-03-18netfilter: fix NETFILTER_XT_TARGET_TEE dependenciesArnd Bergmann1-0/+1
2019-03-01netfilter: nf_tables: merge ipv4 and ipv6 nat chain typesFlorian Westphal1-0/+1
2019-03-01netfilter: nf_tables: nat: merge nft_masq protocol specific modulesFlorian Westphal1-0/+1
2019-03-01netfilter: nf_tables: nat: merge nft_redir protocol specific modulesFlorian Westphal1-0/+1
2019-02-27netfilter: nat: merge nf_nat_ipv4,6 into nat coreFlorian Westphal1-1/+7
2019-02-27netfilter: nat: merge ipv4 and ipv6 masquerade functionalityFlorian Westphal1-0/+3
2019-01-18netfilter: conntrack: gre: switch module to be built-inFlorian Westphal1-1/+1
2018-12-17netfilter: nat: remove l4proto->manip_pktFlorian Westphal1-15/+0
2018-09-17netfilter: nf_tables: add xfrm expressionFlorian Westphal1-0/+7
2018-08-24netfilter: xt_checksum: ignore gso skbsFlorian Westphal1-6/+6
2018-08-03netfilter: kconfig: remove ct zone/label dependenciesFlorian Westphal1-3/+3
2018-08-03netfilter: nf_tables: add tunnel supportPablo Neira Ayuso1-0/+6
2018-08-03netfilter: cttimeout: Make NF_CT_NETLINK_TIMEOUT depend on NF_CONNTRACK_TIMEOUTHarsha Sharma1-0/+1
2018-07-30netfilter: nf_tables: Add native tproxy supportMáté Eckl1-0/+10
2018-07-30netfilter: nf_tables: implement Passive OS fingerprint module in nft_osfFernando Fernandez Mancera1-0/+7
2018-07-30netfilter: nf_osf: rename nf_osf.c to nfnetlink_osf.cFernando Fernandez Mancera1-5/+10
2018-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-5/+7
2018-07-17netfilter: Kconfig: Change select IPv6 dependenciesMáté Eckl1-3/+3
2018-07-17netfilter: conntrack: remove l3proto abstractionFlorian Westphal1-0/+2
2018-07-16netfilter: Kconfig: Make NETFILTER_XT_MATCH_SOCKET select NF_SOCKET_IPV4/6Máté Eckl1-2/+2
2018-07-06netfilter: nf_tables: place all set backends in one single modulePablo Neira Ayuso1-18/+7
2018-06-03netfilter: nf_tables: add connlimit supportPablo Neira Ayuso1-0/+9
2018-06-03netfilter: Libify xt_TPROXYMáté Eckl1-0/+2
2018-06-01netfilter: nf_tables: add support for native socket matchingMáté Eckl1-0/+9
2018-05-29netfilter: nat: merge nf_nat_redirect into nf_natFlorian Westphal1-5/+1
2018-05-23netfilter: make NF_OSF non-visible symbolFernando Fernandez Mancera1-1/+1
2018-05-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-20/+5
2018-05-07netfilter: extract Passive OS fingerprint infrastructure from xt_osfFernando Fernandez Mancera1-0/+4
2018-04-27netfilter: nf_tables: merge exthdr expression into nft coreFlorian Westphal1-6/+0
2018-04-27netfilter: nf_tables: merge rt expression into nft coreFlorian Westphal1-6/+0
2018-04-27netfilter: nf_tables: make meta expression builtinFlorian Westphal1-6/+0
2018-04-24netfilter: nf_flow_table: relax mixed ipv4/ipv6 flowtable dependenciesFelix Fietkau1-2/+1
2018-04-16netfilter: fix CONFIG_NF_REJECT_IPV6=m link errorArnd Bergmann1-0/+1
2018-03-30netfilter: nf_tables: build-in filter chain typePablo Neira Ayuso1-2/+2
2018-02-02netfilter: flowtable infrastructure depends on NETFILTER_INGRESSPablo Neira Ayuso1-3/+5
2018-01-16netfilter: nf_tables: flow_offload depends on flow_tableArnd Bergmann1-1/+1
2018-01-10netfilter: improve flow table Kconfig dependenciesArnd Bergmann1-1/+3
2018-01-08netfilter: nf_tables: flow offload expressionPablo Neira Ayuso1-0/+7
2018-01-08netfilter: flow table support for the mixed IPv4/IPv6 familyPablo Neira Ayuso1-0/+8
2018-01-08netfilter: add generic flow table infrastructurePablo Neira Ayuso1-0/+7
2018-01-08netfilter: connlimit: split xt_connlimit into front and backendFlorian Westphal1-0/+3
2018-01-08netfilter: don't allocate space for arp/bridge hooks unless neededFlorian Westphal1-0/+6
2017-07-31netfilter: nf_tables: add fib expression to the netdev familyPablo M. Bermudo Garay1-0/+9
2017-02-08netfilter: nft_exthdr: add TCP option matchingManuel Messner1-2/+2
2017-02-08netfilter: nf_tables: add bitmap set typePablo Neira Ayuso1-0/+6
2017-02-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-1/+1
2017-01-16netfilter: Fix typo in NF_CONNTRACK Kconfig option descriptionWilliam Breathitt Gray1-1/+1
2017-01-05netfilter: select LIBCRC32C together with SCTP conntrackDavide Caratti1-1/+1
2016-12-06netfilter: nf_tables: add stateful object reference expressionPablo Neira Ayuso1-0/+6
2016-12-04netfilter: conntrack: built-in support for UDPliteDavide Caratti1-2/+3
2016-12-04netfilter: conntrack: built-in support for SCTPDavide Caratti1-4/+3
2016-12-04netfilter: conntrack: built-in support for DCCPDavide Caratti1-3/+3
2016-12-04netfilter: built-in NAT support for UDPliteDavide Caratti1-1/+1
2016-12-04netfilter: built-in NAT support for SCTPDavide Caratti1-1/+1
2016-12-04netfilter: built-in NAT support for DCCPDavide Caratti1-1/+1
2016-11-01netfilter: nf_tables: introduce routing expressionAnders K. Pedersen1-0/+6
2016-11-01netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.cPablo Neira Ayuso1-1/+2
2016-11-01netfilter: nf_log: add packet logging for netdev familyPablo Neira Ayuso1-0/+4
2016-11-01netfilter: nf_tables: add fib expressionFlorian Westphal1-0/+13
2016-08-22netfilter: nf_tables: add number generator expressionLaura Garcia Liebana1-0/+6
2016-08-22netfilter: nf_tables: add quota expressionPablo Neira Ayuso1-0/+6
2016-08-12netfilter: nf_tables: add hash expressionLaura Garcia Liebana1-0/+6
2016-08-12netfilter: nf_tables: rename set implementationsPablo Neira Ayuso1-2/+2
2016-07-01netfilter: Remove references to obsolete CONFIG_IP_ROUTE_FWMARKMoritz Sichert1-6/+4
2016-02-08netfilter: tee: select NF_DUP_IPV6 unconditionallyArnd Bergmann1-1/+1
2016-01-04netfilter: nf_tables: add forward expression to the netdev familyPablo Neira Ayuso1-0/+6
2016-01-03netfilter: nf_tables: add packet duplication to the netdev familyPablo Neira Ayuso1-0/+16
2015-11-10netfilter: fix xt_TEE and xt_TPROXY dependenciesArnd Bergmann1-3/+3
2015-10-05netfilter: nfnetlink_log: allow to attach conntrackKen-ichirou MATSUZAWA1-4/+5
2015-10-05netfilter: Kconfig rename QUEUE_CT to GLUE_CTKen-ichirou MATSUZAWA1-5/+5
2015-08-07netfilter: factor out packet duplication for IPv4/IPv6Pablo Neira Ayuso1-0/+2
2015-06-15netfilter: Kconfig: get rid of parens around depends onPablo Neira Ayuso1-9/+9
2015-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-0/+6
2015-05-26netfilter: nf_tables: add netdev table to filter from ingressPablo Neira Ayuso1-0/+5
2015-05-26netfilter: default CONFIG_NETFILTER_INGRESS to yPablo Neira Ayuso1-0/+1
2015-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+2
2015-05-15netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=mFlorian Westphal1-0/+2
2015-05-14netfilter: add netfilter ingress hook after handle_ing() under unique static keyPablo Neira1-0/+7
2015-03-25netfilter: nf_tables: nft_queue does not depend on x_tablesPatrick McHardy1-1/+0
2015-03-06netfilter: nf_tables: consolidate Kconfig optionsPablo Neira Ayuso1-15/+5
2015-02-11netfilter: Don't hide NETFILTER_XT_MATCH_ADDRTYPE behind NETFILTER_ADVANCEDAnton Blanchard1-1/+1
2014-11-27netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one modulePablo Neira Ayuso1-2/+8
2014-11-12netfilter: fix unmet dependencies in NETFILTER_XT_TARGET_REDIRECTPablo Neira Ayuso1-2/+2
2014-10-27netfilter: nf_tables: add new expression nft_redirArturo Borrero1-0/+9
2014-10-27netfilter: refactor NAT redirect IPv6 code to use it from nf_tablesArturo Borrero1-0/+1
2014-10-27netfilter: refactor NAT redirect IPv4 to use it from nf_tablesArturo Borrero1-0/+1
2014-10-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2014-09-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-0/+1
2014-09-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-0/+9
2014-09-09netfilter: nf_tables: add new nft_masq expressionArturo Borrero1-0/+9
2014-09-07netfilter: xt_TPROXY: undefined reference to `udp6_lib_lookup'Pablo Neira Ayuso1-0/+1
2014-09-05netfilter: add explicit Kconfig for NETFILTER_XT_NATPablo Neira Ayuso1-0/+8
2014-09-01netfilter: NETFILTER_XT_TARGET_LOG selects NF_LOG_*Pablo Neira Ayuso1-1/+3
2014-08-19netfilter: nf_tables: nat expression must select CONFIG_NF_NATPablo Neira Ayuso1-1/+1
2014-06-28netfilter: fix several Kconfig problems in NF_LOG_*Pablo Neira Ayuso1-6/+4
2014-06-27netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c filesPablo Neira Ayuso1-0/+6
2014-02-06netfilter: nf_tables: add reject module for NFPROTO_INETPatrick McHardy1-0/+5
2014-02-06netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc partsPatrick McHardy1-1/+0
2014-01-16Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller1-1/+1
2014-01-14netfilter: Add dependency on IPV6 for NF_TABLES_INETPaul Gortmaker1-1/+1
2014-01-10Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller1-0/+10
2014-01-09netfilter: introduce l2tp match extensionJames Chapman1-0/+10
2014-01-07netfilter: nf_tables: add "inet" table for IPv4/IPv6Patrick McHardy1-0/+8
2014-01-06Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller1-1/+58
2014-01-03netfilter: x_tables: lightweight process control group matchingDaniel Borkmann1-0/+10
2014-01-01netfilter: add help information to new nf_tables Kconfig optionsPablo Neira Ayuso1-0/+42
2013-12-30netfilter: nft_reject: support for IPv6 and TCP resetEric Leblond1-0/+6
2013-12-29netfilter: select NFNETLINK when enabling NF_TABLESEric Leblond1-1/+1
2013-12-24netfilter: add IPv4/6 IPComp extension match supportfan.du1-0/+9
2013-12-07netfilter: nft: add queue moduleEric Leblond1-0/+9
2013-11-13netfilter: fix connlimit Kconfig prompt stringRandy Dunlap1-1/+1
2013-10-14netfilter: nf_tables: Add support for IPv6 NATTomasz Bursztyka1-0/+6
2013-10-14netfilter: nf_tables: add compatibility layer for x_tablesPablo Neira Ayuso1-0/+9
2013-10-14netfilter: nf_tables: add netlink set APIPatrick McHardy1-3/+3
2013-10-14netfilter: add nftablesPatrick McHardy1-0/+37
2013-09-05netfilter: Fix build errors with xt_socket.cDavid S. Miller1-0/+1
2013-08-28netfilter: add SYNPROXY core/targetPatrick McHardy1-0/+3
2013-07-31netfilter: tproxy: remove nf_tproxy_core, keep tw sk assigned to skbFlorian Westphal1-17/+5
2013-02-21Merge tag 'driver-core-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-16/+8
2013-02-05netfilter: fix missing dependencies for NETFILTER_XT_MATCH_CONNLABELFlorian Westphal1-0/+1
2013-01-21netfilter: x_tables: add xt_bpf matchWillem de Bruijn1-0/+9
2013-01-18netfilter: add connlabel conntrack extensionFlorian Westphal1-0/+18
2013-01-11net/netfilter: remove depends on CONFIG_EXPERIMENTALKees Cook1-16/+8
2013-01-04netfilter: fix missing dependencies for the NOTRACK targetPablo Neira Ayuso1-0/+3
2012-12-24netfilter: xt_CT: recover NOTRACK target supportPablo Neira Ayuso1-0/+4
2012-09-21netfilter: combine ipt_REDIRECT and ip6t_REDIRECTJan Engelhardt1-0/+11
2012-09-21netfilter: combine ipt_NETMAP and ip6t_NETMAPJan Engelhardt1-0/+10
2012-09-03netfilter: remove xt_NOTRACKCong Wang1-13/+0
2012-08-30netfilter: nf_nat: support IPv6 in TFTP NAT helperPablo Neira Ayuso1-0/+5
2012-08-30netfilter: nf_nat: support IPv6 in IRC NAT helperPablo Neira Ayuso1-0/+5
2012-08-30netfilter: nf_nat: support IPv6 in SIP NAT helperPatrick McHardy1-0/+5
2012-08-30netfilter: nf_nat: support IPv6 in amanda NAT helperPatrick McHardy1-0/+5
2012-08-30netfilter: nf_nat: support IPv6 in FTP NAT helperPatrick McHardy1-0/+5
2012-08-30netfilter: add protocol independent NAT corePatrick McHardy1-0/+24
2012-06-19netfilter: nfnetlink_queue: fix compilation with NF_CONNTRACK disabledPablo Neira Ayuso1-0/+9
2012-06-19netfilter: fix compilation of the nfnl_cthelper if NF_CONNTRACK is unsetPablo Neira Ayuso1-8/+12
2012-06-16netfilter: add user-space connection tracking helper infrastructurePablo Neira Ayuso1-0/+8
2012-05-09netfilter: add xt_hmark target for hash-based skb markingHans Schillstrom1-0/+15
2012-03-07netfilter: nf_ct_ext: add timeout extensionPablo Neira Ayuso1-0/+10
2012-03-07netfilter: add cttimeout infrastructure for fine timeout tuningPablo Neira Ayuso1-0/+11
2012-03-07netfilter: merge ipt_LOG and ip6_LOG into xt_LOGRichard Weinberger1-0/+9
2011-12-29netfilter: Kconfig: fix unmet xt_nfacct dependenciesPablo Neira Ayuso1-1/+1
2011-12-27netfilter: provide config option to disable ancient procfs partsJan Engelhardt1-0/+10
2011-12-27netfilter: xtables: move ipt_ecn to xt_ecnJan Engelhardt1-0/+9
2011-12-25netfilter: xtables: add nfacct match to support extended accountingPablo Neira Ayuso1-0/+10
2011-12-25netfilter: add extended accounting infrastructure over nfnetlinkPablo Neira Ayuso1-0/+8
2011-12-01netfilter: Remove ADVANCED dependency from NF_CONNTRACK_NETBIOS_NSDavid S. Miller1-1/+0
2011-11-23netfilter: Remove NOTRACK/RAW dependency on NETFILTER_ADVANCED.David S. Miller1-1/+0
2011-09-27doc: fix broken referencesPaul Bolle1-1/+1
2011-04-04netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->routeFlorian Westphal1-1/+0
2011-03-15netfilter: xt_addrtype: ipv6 supportFlorian Westphal1-0/+1
2011-03-15netfilter: ipt_addrtype: rename to xt_addrtypeFlorian Westphal1-0/+10
2011-02-03netfilter: xtables: add device group matchPatrick McHardy1-0/+9
2011-02-01netfilter: xtables: "set" match and "SET" target supportJozsef Kadlecsik1-0/+12
2011-02-01netfilter: ipset: IP set core supportJozsef Kadlecsik1-0/+2
2011-01-19netfilter: nf_conntrack_tstamp: add flow-based timestamp extensionPablo Neira Ayuso1-0/+11
2011-01-18netfilter: nf_conntrack: nf_conntrack snmp helperJiri Olsa1-0/+19
2011-01-18netfilter: Kconfig: NFQUEUE is useless without NETFILTER_NETLINK_QUEUEFlorian Westphal1-0/+1
2011-01-16netfilter: audit target to record accepted/dropped packetsThomas Graf1-0/+10