aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nf_nat_core.c
AgeCommit message (Expand)AuthorFilesLines
2024-02-15netfilter: nat: restore default DNAT behaviorKyle Swenson1-1/+4
2023-11-08netfilter: add missing module descriptionsFlorian Westphal1-0/+1
2023-08-24minmax: add in_range() macroMatthew Wilcox (Oracle)1-3/+3
2023-06-26netfilter: snat: evict closing tcp entries on reply tuple collisionFlorian Westphal1-4/+88
2023-03-08netfilter: nat: fix indentation of function argumentsJeremy Sowden1-2/+2
2022-11-02netfilter: nf_nat: Fix possible memory leak in nf_nat_init()Chen Zhongjin1-1/+10
2022-10-11treewide: use get_random_{u8,u16}() when possible, part 1Jason A. Donenfeld1-2/+2
2022-10-03net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.cLorenzo Bianconi1-2/+2
2022-03-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-40/+3
2022-03-08Revert "netfilter: nat: force port remap to prevent shadowing well-known ports"Florian Westphal1-40/+3
2022-02-04netfilter: conntrack: remove extension register apiFlorian Westphal1-13/+0
2022-02-04netfilter: conntrack: handle ->destroy hook via nat_ops insteadFlorian Westphal1-10/+3
2022-02-04netfilter: conntrack: move extension sizes into coreFlorian Westphal1-1/+0
2022-02-04netfilter: conntrack: make all extensions 8-byte alignnedFlorian Westphal1-1/+0
2022-01-09netfilter: make function op structures constFlorian Westphal1-1/+1
2021-12-23netfilter: nat: force port remap to prevent shadowing well-known portsFlorian Westphal1-3/+40
2021-11-16net: align static siphash keysEric Dumazet1-1/+1
2021-10-26netfilter: conntrack: skip confirmation and nat hooks in postrouting for vrfFlorian Westphal1-1/+11
2021-09-21netfilter: nat: include zone id in nat table hash againFlorian Westphal1-5/+12
2021-08-30netfilter: conntrack: switch to siphashFlorian Westphal1-4/+14
2021-04-26netfilter: nat: move nf_xfrm_me_harder to where it is usedFlorian Westphal1-37/+0
2021-01-11netfilter: nf_nat: Fix memleak in nf_nat_initDinghao Liu1-0/+1
2020-07-22netfilter: Use fallthrough pseudo-keywordGustavo A. R. Silva1-6/+6
2019-09-13netfilter: update include directives.Jeremy Sowden1-3/+3
2019-07-16netfilter: Update obsolete comments referring to ip_conntrackYonatan Goldschmidt1-1/+1
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-04-27netlink: make validation more configurable for future strictnessJohannes Berg1-3/+4
2019-04-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+8
2019-04-15netfilter: nat: fix icmp id randomizationFlorian Westphal1-3/+8
2019-04-08netfilter: nat: add inet family nat supportFlorian Westphal1-9/+7
2019-02-27netfilter: remove unneeded switch fall-throughLi RongQing1-1/+1
2019-02-27netfilter: nat: remove nf_nat_l3proto.h and nf_nat_core.hFlorian Westphal1-2/+0
2019-02-27netfilter: nat: remove l3proto structFlorian Westphal1-54/+0
2019-02-27netfilter: nat: remove l3 manip_pkt hookFlorian Westphal1-17/+0
2019-02-27netfilter: nat: merge nf_nat_ipv4,6 into nat coreFlorian Westphal1-0/+17
2019-02-27netfilter: nat: move nlattr parse and xfrm session decode to coreFlorian Westphal1-19/+123
2019-01-18netfilter: nat: un-export nf_nat_used_tupleFlorian Westphal1-2/+1
2019-01-18netfilter: conntrack: avoid unneeded nf_conntrack_l4proto lookupsFlorian Westphal1-6/+6
2018-12-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-137/+190
2018-12-17netfilter: nat: remove nf_nat_l4proto structFlorian Westphal1-103/+1
2018-12-17netfilter: nat: remove l4proto->nlattr_to_rangeFlorian Westphal1-6/+16
2018-12-17netfilter: nat: remove l4proto->in_rangeFlorian Westphal1-24/+43
2018-12-17netfilter: nat: fold in_range indirection into callerFlorian Westphal1-7/+16
2018-12-17netfilter: nat: remove l4proto->unique_tupleFlorian Westphal1-13/+56
2018-12-17netfilter: nat: un-export nf_nat_l4proto_unique_tupleFlorian Westphal1-1/+75
2018-12-13netfilter: nat: can't use dst_hold on noref dstFlorian Westphal1-1/+2
2018-08-03netfilter: use kvmalloc_array to allocate memory for hashtableLi RongQing1-2/+2
2018-07-17netfilter: conntrack: remove l3proto abstractionFlorian Westphal1-8/+0
2018-06-28netfilter: check if the socket netns is correct.Flavio Leitner1-1/+5
2018-06-12treewide: kmalloc() -> kmalloc_array()Kees Cook1-2/+3
2018-05-29netfilter: nat: make symbol nat_hook staticWei Yongjun1-1/+1
2018-05-23netfilter: nfnetlink_queue: resolve clash for unconfirmed conntracksPablo Neira Ayuso1-15/+26
2018-05-23netfilter: add struct nf_nat_hook and use itPablo Neira Ayuso1-11/+12
2018-05-23netfilter: nf_nat: add nat type hooks to nat coreFlorian Westphal1-13/+18
2018-05-23netfilter: nf_nat: add nat hook register functions to nf_natFlorian Westphal1-0/+157
2018-05-23netfilter: nf_nat: move common nat code to nat coreFlorian Westphal1-0/+70
2018-04-24netfilter: add NAT support for shifted portmap rangesThierry Du Tre1-13/+14
2018-03-20netfilter: Replace printk() with pr_*() and define pr_fmt()Arushi Singhal1-1/+3
2017-10-24netfilter: nat: use test_and_clear_bit when deleting ct from bysource listFlorian Westphal1-6/+3
2017-09-18netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero divGeert Uytterhoeven1-6/+6
2017-09-08netfilter: nat: use keyed locksFlorian Westphal1-12/+24
2017-09-08netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"Florian Westphal1-77/+53
2017-09-08netfilter: nf_nat: don't bug when mapping already existsFlorian Westphal1-1/+3
2017-09-04net: Replace NF_CT_ASSERT() with WARN_ON().Varsha Rao1-2/+2
2017-08-24netfilter: check for seqadj ext existence before adding it in nf_nat_setup_infoXin Long1-1/+1
2017-07-17netfilter: nat: fix src map lookupFlorian Westphal1-8/+9
2017-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-32/+5
2017-05-29netfilter: nat: destroy nat mappings on module exit path onlyFlorian Westphal1-32/+5
2017-05-29netfilter: conntrack: rename nf_ct_iterate_cleanupFlorian Westphal1-3/+3
2017-05-23netfilter: nat: use atomic bit op to clear the _SRC_NAT_DONE_BITLiping Zhang1-1/+1
2017-05-15netfilter: don't setup nat info for confirmed ctLiping Zhang1-0/+4
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-30/+7
2017-04-26netfilter: don't attach a nat extension by defaultFlorian Westphal1-6/+0
2017-04-26netfilter: conntrack: remove prealloc supportFlorian Westphal1-1/+0
2017-04-15netfilter: kill the fake untracked conntrack objectsFlorian Westphal1-3/+0
2017-04-15netfilter: nf_nat: Fix return NF_DROP in nfnetlink_parse_nat_setupGao Feng1-1/+1
2017-04-13netfilter: nat: remove rcu_read_lock in __nf_nat_decode_session.Taehee Yoo1-5/+2
2017-04-13netlink: pass extended ACK struct to parsing functionsJohannes Berg1-2/+3
2017-04-06netfilter: nat: avoid use of nf_conn_nat extensionFlorian Westphal1-14/+4
2017-03-27netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang1-0/+2
2016-12-04netfilter: built-in NAT support for UDPliteDavide Caratti1-0/+4
2016-12-04netfilter: built-in NAT support for SCTPDavide Caratti1-0/+4
2016-12-04netfilter: built-in NAT support for DCCPDavide Caratti1-0/+4
2016-11-24netfilter: nat: switch to new rhlist interfaceFlorian Westphal1-16/+24
2016-11-24netfilter: nat: fix cmp return valueFlorian Westphal1-3/+6
2016-09-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+3
2016-09-13netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensionsGao Feng1-1/+2
2016-09-12netfilter: nf_nat: handle NF_DROP from nfnetlink_parse_nat_setup()Pablo Neira Ayuso1-1/+1
2016-08-30netfilter: conntrack: get rid of conntrack timerFlorian Westphal1-6/+0
2016-07-11netfilter: nat: convert nat bysrc hash to rhashtableFlorian Westphal1-58/+68
2016-07-11netfilter: move nat hlist_head to nf_connFlorian Westphal1-26/+7
2016-05-09netfilter: conntrack: use a single nat bysource table for all namespacesFlorian Westphal1-16/+17
2016-05-09netfilter: conntrack: make netns address part of nat bysrc hashFlorian Westphal1-3/+3
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal1-1/+1
2016-04-25netfilter: conntrack: use get_random_once for nat and expectationsFlorian Westphal1-2/+4
2015-09-18netfilter: Pass net into nf_xfrm_me_harderEric W. Biederman1-2/+2
2015-08-18netfilter: nf_conntrack: add direction support for zonesDaniel Borkmann1-7/+6
2015-08-11netfilter: nf_conntrack: push zone object into functionsDaniel Borkmann1-7/+12
2014-08-23net: use reciprocal_scale() helperDaniel Borkmann1-2/+3
2014-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-1/+1
2014-06-30netfilter: use IS_ENABLED() macroDuan Jiong1-1/+1
2014-06-16netfilter: nf_nat: fix oops on netns removalFlorian Westphal1-1/+34
2014-04-29netfilter: add helper for adding nat extensionFlorian Westphal1-8/+16
2014-02-18netfilter: ctnetlink: force null nat binding on insertPablo Neira Ayuso1-21/+35
2014-01-03netfilter: nf_nat: add full port randomization supportDaniel Borkmann1-2/+2
2013-10-14netfilter: nf_nat: move alloc_null_binding to nf_nat_core.cPablo Neira Ayuso1-0/+20
2013-08-28netfilter: nf_conntrack: make sequence number adjustments usuable without NATPatrick McHardy1-12/+4
2013-08-09netfilter: nf_conntrack: don't send destroy events from iteratorFlorian Westphal1-3/+3
2013-04-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller1-0/+1
2013-04-25netfilter: nf_nat: missing condition in nf_xfrm_me_harder()Dan Carpenter1-0/+1
2013-04-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-33/+7
2013-04-12netfilter: nf_nat: fix race when unloading protocol modulesFlorian Westphal1-33/+7
2013-04-08netfilter: nat: propagate errors from xfrm_me_harder()Patrick McHardy1-4/+5
2013-02-27hlist: drop the node parameter from iteratorsSasha Levin1-2/+1
2012-09-21netfilter: nf_nat: remove obsolete rcu_read_unlock callUlrich Weber1-3/+1
2012-09-21netfilter: nf_nat: fix oops when unloading protocol modulesPatrick McHardy1-0/+2
2012-09-09netfilter: nf_nat: fix out-of-bounds access in address selectionFlorian Westphal1-1/+1
2012-08-30netfilter: ipv6: add IPv6 NAT supportPatrick McHardy1-0/+2
2012-08-30netfilter: add protocol independent NAT corePatrick McHardy1-0/+854