aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nf_conntrack_netlink.c
AgeCommit message (Expand)AuthorFilesLines
2024-02-08netfilter: ctnetlink: fix filtering for zone 0Felix Huettner1-4/+8
2023-12-22netfilter: ctnetlink: support filtering by zoneFelix Huettner1-4/+8
2023-11-08netfilter: add missing module descriptionsFlorian Westphal1-0/+1
2023-07-27netfilter: conntrack: validate cta_ip via parsingLin Ma1-6/+2
2023-05-17netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with C...Tom Rix1-0/+4
2023-04-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni1-4/+12
2023-04-19netfilter: conntrack: fix wrong ct->timeout valueTzung-Bi Shih1-4/+9
2023-04-19netfilter: conntrack: restore IPS_CONFIRMED out of nf_conntrack_hash_check_in...Pablo Neira Ayuso1-0/+3
2023-03-30netfilter: ctnetlink: Support offloaded conntrack entry deletionPaul Blakey1-8/+0
2023-03-06netfilter: ctnetlink: revert to dumping mark regardless of event typeIvan Delalande1-7/+7
2023-02-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski1-4/+4
2023-02-22netfilter: conntrack: fix rmmod double-free raceFlorian Westphal1-3/+0
2023-02-22netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()Hangyu Hua1-1/+4
2023-01-24netlink: fix spelling mistake in dump size assertJakub Kicinski1-1/+1
2023-01-05netlink: add macro for checking dump ctx sizeJakub Kicinski1-1/+1
2022-11-30netfilter: ctnetlink: fix compilation warning after data race fixes in ct markPablo Neira Ayuso1-9/+10
2022-11-18netfilter: conntrack: Fix data-races around ct markDaniel Xu1-10/+14
2022-08-31netfilter: remove nf_conntrack_helper sysctl and modparam togglesPablo Neira Ayuso1-5/+0
2022-07-22Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-50/+4
2022-07-21net: netfilter: Add kfuncs to set and change CT statusLorenzo Bianconi1-37/+2
2022-07-21net: netfilter: Add kfuncs to set and change CT timeoutKumar Kartikeya Dwivedi1-8/+1
2022-07-21net: netfilter: Add kfuncs to allocate and insert CTLorenzo Bianconi1-6/+2
2022-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski1-2/+7
2022-07-11netfilter: nf_conntrack: use rcu accessors where neededFlorian Westphal1-2/+7
2022-07-07netfilter: conntrack: fix crash due to confirmed bit load reorderingFlorian Westphal1-0/+1
2022-05-18netfilter: ctnetlink: fix up for "netfilter: conntrack: remove unconfirmed list"Stephen Rothwell1-0/+2
2022-05-13netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*()Pablo Neira Ayuso1-2/+8
2022-05-13netfilter: conntrack: remove unconfirmed listFlorian Westphal1-43/+1
2022-05-13netfilter: conntrack: remove the percpu dying listFlorian Westphal1-16/+7
2022-05-13netfilter: conntrack: include ecache dying list in dumpsFlorian Westphal1-0/+43
2022-04-08netfilter: conntrack: split inner loop of list dumping to own functionFlorian Westphal1-25/+43
2022-02-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+2
2022-02-09netfilter: ctnetlink: use dump structure instead of raw argsFlorian Westphal1-12/+24
2022-02-04netfilter: ctnetlink: disable helper autoassignFlorian Westphal1-1/+2
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski1-5/+5
2022-01-09netfilter: make function op structures constFlorian Westphal1-2/+2
2022-01-09netfilter: conntrack: convert to refcount_t apiFlorian Westphal1-3/+3
2021-12-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+3
2021-12-16netfilter: ctnetlink: remove expired entries firstFlorian Westphal1-2/+3
2021-12-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski1-1/+1
2021-12-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2021-12-08netfilter: conntrack: annotate data-races around ct->timeoutEric Dumazet1-1/+1
2021-11-30netfilter: ctnetlink: remove useless type conversion to boolBernard Zhao1-1/+1
2021-11-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-4/+2
2021-11-16net: align static siphash keysEric Dumazet1-1/+1
2021-11-08netfilter: ctnetlink: do not erase error code with EINVALFlorent Fourcot1-3/+1
2021-11-08netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLYFlorent Fourcot1-1/+1
2021-09-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfJakub Kicinski1-1/+3
2021-08-30netfilter: refuse insertion if chain has grown too largeFlorian Westphal1-1/+3
2021-08-25netfilter: ctnetlink: missing counters and timestamp in nfnetlink_{log,queue}Pablo Neira Ayuso1-0/+6
2021-08-25netfilter: ecache: remove nf_exp_event_notifier structureFlorian Westphal1-27/+3
2021-08-25netfilter: ecache: prepare for event notifier mergeFlorian Westphal1-16/+6
2021-08-25netfilter: ecache: remove one indent levelFlorian Westphal1-1/+1
2021-08-05netfilter: ctnetlink: allow to filter dump by status bitsFlorian Westphal1-1/+33
2021-08-05netfilter: ctnetlink: add and use a helper for mark parsingFlorian Westphal1-15/+27
2021-07-02netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin1-0/+3
2021-06-07netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use itPablo Neira Ayuso1-14/+9
2021-05-29netfilter: use nfnetlink_unicast()Pablo Neira Ayuso1-47/+18
2021-04-26netfilter: nfnetlink: consolidate callback typesPablo Neira Ayuso1-26/+62
2021-04-26netfilter: nfnetlink: add struct nfnl_info and pass it to callbacksPablo Neira Ayuso1-113/+101
2021-04-13netfilter: conntrack: move ct counter to net_generic dataFlorian Westphal1-2/+3
2021-03-31netfilter: add helper function to set up the nfnetlink header and use itPablo Neira Ayuso1-56/+21
2021-03-15netfilter: ctnetlink: fix dump of the expect mask attributeFlorian Westphal1-0/+1
2021-01-25netfilter: ctnetlink: remove get_ct indirectionFlorian Westphal1-7/+0
2020-12-12netfilter: ctnetlink: add timeout and protoinfo to destroy eventsFlorian Westphal1-11/+20
2020-09-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-17/+5
2020-09-08netfilter: ctnetlink: fix mark based dump filtering regressionMartin Willi1-16/+3
2020-09-08netfilter: ctnetlink: add a range check for l3/l4 protonumWill McVicker1-1/+2
2020-08-28netfilter: conntrack: add clash resolution stat counterFlorian Westphal1-1/+3
2020-08-28netfilter: conntrack: remove ignore statsFlorian Westphal1-1/+0
2020-06-10netfilter: ctnetlink: memleak in filter initialization error pathPablo Neira Ayuso1-10/+22
2020-05-27netfilter: ctnetlink: add kernel side filtering for dumpRomain Bellan1-39/+295
2020-03-30netfilter: ctnetlink: be more strict when NF_CONNTRACK_MARK is not setRomain Bellan1-1/+1
2020-03-27netfilter: ctnetlink: Add missing annotation for ctnetlink_parse_nat_setup()Jules Irenge1-0/+1
2019-11-29netfilter: ctnetlink: netns exit must wait for callbacksFlorian Westphal1-0/+3
2019-10-17netfilter: ctnetlink: don't dump ct extensions of unconfirmed conntracksFlorian Westphal1-26/+50
2019-09-03netfilter: ctnetlink: honor IPS_OFFLOAD flagPablo Neira Ayuso1-2/+5
2019-07-16netfilter: nf_conntrack_sip: fix expectation clashxiao ruizhu1-2/+2
2019-06-26netfilter: ctnetlink: Fix regression in conntrack entry deletionFelix Kaechele1-3/+4
2019-05-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-1/+1
2019-05-06netfilter: ctnetlink: Resolve conntrack L3-protocol flush regressionKristian Evensen1-1/+1
2019-04-27netlink: make validation more configurable for future strictnessJohannes Berg1-20/+25
2019-04-27netlink: make nla_nest_start() add NLA_F_NESTED flagMichal Kubecek1-20/+20
2019-04-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-5/+29
2019-04-15netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal1-5/+29
2019-04-08netfilter: replace NF_NAT_NEEDED with IS_ENABLED(CONFIG_NF_NAT)Florian Westphal1-8/+8
2019-02-27netfilter: nat: remove nf_nat_l3proto.h and nf_nat_core.hFlorian Westphal1-1/+1
2019-02-12netfilter: conntrack: fix indentation issueColin Ian King1-1/+1
2019-01-18netfilter: conntrack: remove nf_ct_l4proto_find_getFlorian Westphal1-8/+6
2018-12-17netfilter: nat: remove nf_nat_l4proto structFlorian Westphal1-1/+0
2018-11-12netfilter: ctnetlink: always honor CTA_MARK_MASKAndreas Jaggi1-10/+19
2018-09-21netfilter: ctnetlink: must check mark attributes vs NULLFlorian Westphal1-2/+9
2018-09-20netfilter: conntrack: remove l3->l4 mapping informationFlorian Westphal1-8/+6
2018-09-17netfilter: ctnetlink: Support L3 protocol-filter on flushKristian Evensen1-22/+28
2018-08-16netfilter: fix memory leaks on netlink_dump_start errorFlorian Westphal1-9/+17
2018-07-18netfilter: Remove useless param helper of nf_ct_helper_ext_addGao Feng1-1/+1
2018-07-16netfilter: conntrack: remove ctnetlink callbacks from l3 protocol trackersFlorian Westphal1-24/+72
2018-06-12netfilter: ctnetlink: avoid null pointer dereferenceFlorian Westphal1-1/+2
2018-05-23netfilter: add struct nf_nat_hook and use itPablo Neira Ayuso1-5/+5
2018-05-07netfilter: ctnetlink: export nf_conntrack_maxFlorent Fourcot1-0/+3
2018-03-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-6/+86
2018-03-30netfilter: Merge assignment with returnArushi Singhal1-3/+2
2018-03-27net: Drop pernet_operations::asyncKirill Tkhai1-1/+0
2018-03-20netfilter: ctnetlink: synproxy supportPablo Neira Ayuso1-3/+84
2018-03-05net: Convert ctnetlink_net_opsKirill Tkhai1-0/+1
2018-01-19netfilter: remove messages print and boot/module load timePablo Neira Ayuso1-5/+0
2018-01-08netfilter: nf_conntrack: add IPS_OFFLOAD status bitPablo Neira Ayuso1-1/+14
2018-01-08netfilter: conntrack: remove nlattr_size pointer from l4proto trackersFlorian Westphal1-1/+1
2017-12-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-3/+9
2017-12-13net: remove duplicate includesPravin Shedge1-1/+0
2017-11-28netfilter: conntrack: clamp timeouts to INT_MAXJay Elliott1-3/+9
2017-11-16netfilter: add ifdef around ctnetlink_proto_sizeArnd Bergmann1-0/+2
2017-11-06netfilter: conntrack: don't cache nlattr_tuple_size result in nla_sizeFlorian Westphal1-3/+7
2017-08-24netfilter: conntrack: make protocol tracker pointers constFlorian Westphal1-11/+11
2017-08-24netfilter: conntrack: compute l3proto nla size at compile timeFlorian Westphal1-1/+2
2017-08-02netfilter: constify nf_conntrack_l3/4proto parametersJulia Lawall1-3/+3
2017-07-31netfilter: expect: add and use nf_ct_expect_iterate helpersFlorian Westphal1-42/+21
2017-07-24netfilter: Remove duplicated rcu_read_lock.Taehee Yoo1-12/+0
2017-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-17/+30
2017-06-19netfilter: nfnetlink: extended ACK reportingPablo Neira Ayuso1-13/+26
2017-05-29netfilter: conntrack: rename nf_ct_iterate_cleanupFlorian Westphal1-2/+2
2017-05-29netfilter: ctnetlink: delete extra spaceslinzhang1-2/+2
2017-05-24netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang1-1/+6
2017-05-15netfilter: synproxy: fix conntrackd interactionEric Leblond1-0/+4
2017-05-15netfilter: ctnetlink: Make some parameters integer to avoid enum mismatchMatthias Kaehlcke1-4/+3
2017-05-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-40/+49
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-37/+18
2017-04-24netfilter: ctnetlink: acquire ct->lock before operating nf_ct_seqadjLiping Zhang1-6/+15
2017-04-24netfilter: ctnetlink: make it safer when updating ct->statusLiping Zhang1-9/+24
2017-04-24netfilter: ctnetlink: fix deadlock due to acquire _expect_lock twiceLiping Zhang1-12/+12
2017-04-24netfilter: ctnetlink: drop the incorrect cthelper module requestLiping Zhang1-16/+1
2017-04-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-12/+29
2017-04-15netfilter: remove nf_ct_is_untrackedFlorian Westphal1-11/+1
2017-04-13netlink: pass extended ACK struct to parsing functionsJohannes Berg1-11/+16
2017-04-08netfilter: nf_ct_expect: use proper RCU list traversal/update APIsLiping Zhang1-3/+3
2017-04-08netfilter: ctnetlink: skip dumping expect when nfct_help(ct) is NULLLiping Zhang1-0/+6
2017-04-08netfilter: ctnetlink: make it safer when checking the ct helper nameLiping Zhang1-5/+10
2017-04-08netfilter: helper: Add the rcu lock when call __nf_conntrack_helper_findGao Feng1-2/+8
2017-04-08netfilter: ctnetlink: using bit to represent the ct eventLiping Zhang1-2/+2
2017-04-07netfilter: Add nfnl_msg_type() helper functionPablo Neira Ayuso1-7/+9
2017-04-06netfilter: ctnetlink: Expectations must have a conntrack helper areaGao Feng1-19/+8
2017-04-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2017-03-27netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang1-0/+1
2017-03-17netfilter: refcounter conversionsReshetova, Elena1-2/+2
2017-02-06netfilter: ctnetlink: Fix regression in CTA_HELP processingKevin Cernekee1-4/+13
2017-02-06netfilter: ctnetlink: Fix regression in CTA_STATUS processingKevin Cernekee1-1/+25
2016-09-12netfilter: conntrack: remove packet hotpath statsFlorian Westphal1-5/+1
2016-09-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-14/+30
2016-08-30netfilter: evict stale entries on netlink dumpsFlorian Westphal1-1/+24
2016-08-30netfilter: conntrack: get rid of conntrack timerFlorian Westphal1-9/+5
2016-08-12netfilter: use_nf_conn_expires helper in more placesFlorian Westphal1-4/+1
2016-08-09netfilter: ctnetlink: reject new conntrack request with different l4protoLiping Zhang1-0/+2
2016-08-09netfilter: nfnetlink_queue: fix memory leak when attach expectation successfullyLiping Zhang1-6/+2
2016-07-22netfilter: conntrack: support a fixed size of 128 distinct labelsFlorian Westphal1-5/+5
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal1-3/+3
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal1-0/+12
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal1-4/+4
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal1-0/+3
2016-04-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-70/+49
2016-04-23libnl: nla_put_be64(): align on a 64-bit areaNicolas Dichtel1-7/+11
2016-04-18netfilter: ctnetlink: restore inlining for netlink message size calculationPablo Neira Ayuso1-5/+5
2016-04-14netfilter: ctnetlink: remove unnecessary inliningPablo Neira Ayuso1-69/+48
2016-01-20netfilter: nf_conntrack: use safer way to lock all bucketsSasha Levin1-1/+1
2015-12-28netfilter: nfnetlink: pass down netns pointer to call() and call_rcu()Pablo Neira Ayuso1-53/+43
2015-10-05netfilter: ctnetlink: add const qualifier to nfnl_hook.get_ctKen-ichirou MATSUZAWA1-1/+1
2015-10-05netfilter: Kconfig rename QUEUE_CT to GLUE_CTKen-ichirou MATSUZAWA1-4/+4
2015-10-05netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack infoKen-ichirou MATSUZAWA1-30/+30
2015-10-04netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.cPablo Neira Ayuso1-3/+49
2015-08-18netfilter: nf_conntrack: add efficient mark to zone mappingDaniel Borkmann1-3/+2
2015-08-18netfilter: nf_conntrack: add direction support for zonesDaniel Borkmann1-46/+131
2015-08-11netfilter: nf_conntrack: push zone object into functionsDaniel Borkmann1-40/+44
2015-07-10netfilter: ctnetlink: put back references to master ct and expect objectsPablo Neira Ayuso1-5/+0
2015-01-08netfilter: conntrack: Flush connections with a given markKristian Evensen1-25/+64
2014-08-22net: use ktime_get_ns() and ktime_get_real_ns() helpersEric Dumazet1-1/+1
2014-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-2/+1
2014-06-25netfilter: ctnetlink: remove null test before kfreeFabian Frederick1-2/+1
2014-06-16netfilter: ctnetlink: add zone size to lengthKen-ichirou MATSUZAWA1-0/+6
2014-06-16netfilter: ctnetlink: fix refcnt leak in dying/unconfirmed list dumperFlorian Westphal1-3/+5
2014-06-16netfilter: ctnetlink: fix dumping of dying/unconfirmed conntracksPablo Neira Ayuso1-5/+3
2014-04-29netfilter: ctnetlink: don't add null bindings if no nat requestedFlorian Westphal1-0/+3
2014-03-17Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller1-56/+77
2014-03-07netfilter: conntrack: remove central spinlock nf_conntrack_lockJesper Dangaard Brouer1-2/+13
2014-03-07netfilter: conntrack: seperate expect locking from nf_conntrack_lockJesper Dangaard Brouer1-16/+16
2014-03-07netfilter: conntrack: spinlock per cpu to protect special lists.Jesper Dangaard Brouer1-35/+46
2014-02-19netfilter: nft_ct: labels get supportFlorian Westphal1-3/+2
2014-02-18netfilter: ctnetlink: force null nat binding on insertPablo Neira Ayuso1-21/+14
2013-12-20netfilter: ctnetlink: honor CTA_MARK_MASK when setting ctmarkFlorian Westphal1-2/+10
2013-11-03netfilter: ctnetlink: account both directions in one stepHolger Eitzenberger1-25/+24
2013-11-03netfilter: introduce nf_conn_acct structureHolger Eitzenberger1-7/+9
2013-08-28netfilter: ctnetlink: fix uninitialized variableFlorian Westphal1-1/+1
2013-08-28netfilter: nf_conntrack: make sequence number adjustments usuable without NATPatrick McHardy1-61/+54
2013-08-13netfilter: nfnetlink_queue: allow to attach expectations to conntracksPablo Neira Ayuso1-15/+80
2013-08-13netfilter: ctnetlink: refactor ctnetlink_create_expectPablo Neira Ayuso1-69/+87
2013-07-31netfilter: nf_conntrack: remove duplicate code in ctnetlinkFlorian Westphal1-15/+3
2013-07-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2013-06-24netfilter: ctnetlink: send event when conntrack label was modifiedFlorian Westphal1-0/+1
2013-06-20netfilter: check return code from nla_parse_testedDaniel Borkmann1-7/+23
2013-03-19netfilter: ctnetlink: allow to dump expectation per master conntrackPablo Neira Ayuso1-5/+95
2013-02-27hlist: drop the node parameter from iteratorsSasha Levin1-5/+4
2013-02-18Merge branch 'master' of git://1984.lsi.us.es/nf-nextDavid S. Miller1-6/+6
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-03 12:52:51 +0000