aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_ct.c
AgeCommit message (Expand)AuthorFilesLines
2024-03-11Merge tag 'x86-core-2024-03-11' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-2/+2
2024-03-07netfilter: nft_ct: fix l3num expectations with inet pseudo familyFlorian Westphal1-6/+5
2024-02-14Merge branch 'x86/bugs' into x86/core, to pick up pending changes before depe...Ingo Molnar1-2/+2
2024-02-08netfilter: nft_ct: reject direction for ct idPablo Neira Ayuso1-0/+3
2024-01-31netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectationsPablo Neira Ayuso1-0/+24
2024-01-10x86/bugs: Rename CONFIG_RETPOLINE => CONFIG_MITIGATION_RETPOLINEBreno Leitao1-2/+2
2023-08-22netfilter: nf_tables: refactor deprecated strncpyJustin Stitt1-1/+1
2023-07-20netfilter: allow exp not to be removed in nf_ct_find_expectationXin Long1-0/+2
2023-06-26netfilter: nf_tables: limit allowed range via nla_policyFlorian Westphal1-1/+1
2023-01-18netfilter: nf_tables: avoid retpoline overhead for some ct expression callsFlorian Westphal1-12/+27
2022-11-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+3
2022-11-18netfilter: conntrack: Fix data-races around ct markDaniel Xu1-3/+3
2022-11-15netfilter: nf_tables: Extend nft_expr_ops::dump callback parametersPhil Sutter1-2/+4
2022-08-31netfilter: remove nf_conntrack_helper sysctl and modparam togglesPablo Neira Ayuso1-3/+0
2022-07-11netfilter: nf_tables: use correct integer typesFlorian Westphal1-2/+2
2022-03-20netfilter: nft_ct: track register operationsPablo Neira Ayuso1-0/+47
2022-03-20netfilter: nf_tables: do not reduce read-only expressionsPablo Neira Ayuso1-0/+1
2022-03-20netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned()Phil Sutter1-0/+3
2022-01-27netfilter: nft_ct: fix use after free when attaching zone templateFlorian Westphal1-1/+4
2022-01-09netfilter: conntrack: convert to refcount_t apiFlorian Westphal1-3/+1
2021-08-11netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutexPavel Skripkin1-1/+8
2021-06-02netfilter: nft_ct: skip expectations for confirmed conntrackPablo Neira Ayuso1-1/+1
2021-03-18netfilter: Fix fall-through warnings for ClangGustavo A. R. Silva1-0/+1
2021-01-27netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso1-4/+3
2021-01-27netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-3/+2
2020-12-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+0
2020-12-09netfilter: nft_ct: Remove confirmation check for NFT_CT_IDBrett Mastbergen1-2/+0
2020-11-16treewide: rename nla_strlcpy to nla_strscpy.Francis Laniel1-1/+1
2020-07-22netfilter: Use fallthrough pseudo-keywordGustavo A. R. Silva1-3/+3
2020-06-25netfilter: Add MODULE_DESCRIPTION entries to kernel modulesRob Gill1-0/+1
2019-12-09treewide: Use sizeof_field() macroPankaj Bharadiya1-6/+6
2019-07-16netfilter: nf_conntrack_sip: fix expectation clashxiao ruizhu1-1/+1
2019-06-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso1-4/+1
2019-06-19netfilter: nft_ct: fix null pointer in ct expectations supportStéphane Veyret1-0/+4
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-06-17netfilter: nft_ct: add ct expectations supportStéphane Veyret1-2/+136
2019-04-30netfilter: nft_ct: Add ct id supportBrett Mastbergen1-0/+8
2019-04-27netlink: make validation more configurable for future strictnessJohannes Berg1-3/+5
2019-04-27netlink: make nla_nest_start() add NLA_F_NESTED flagMichal Kubecek1-1/+1
2019-01-18netfilter: conntrack: remove nf_ct_l4proto_find_getFlorian Westphal1-1/+1
2019-01-18netfilter: conntrack: remove module owner fieldFlorian Westphal1-2/+0
2018-09-28netfilter: nf_tables: add requirements for connsecmark supportChristian Göttsche1-1/+16
2018-09-20netfilter: conntrack: remove l3->l4 mapping informationFlorian Westphal1-1/+1
2018-09-17netfilter: cttimeout: remove superfluous check on layer 4 netlink functionsPablo Neira Ayuso1-3/+0
2018-08-29netfilter: nf_tables: rework ct timeout set supportFlorian Westphal1-30/+29
2018-08-16netfilter: nft_ct: make l3 protocol field optional for timeout objectHarsha Sharma1-3/+4
2018-08-07netfilter: nft_ct: enable conntrack for helpersPablo Neira Ayuso1-0/+14
2018-08-07netfilter: nft_ct: add ct timeout supportHarsha Sharma1-1/+203
2018-07-18netfilter: Remove useless param helper of nf_ct_helper_ext_addGao Feng1-1/+1
2018-06-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-8/+12
2018-06-03netfilter: nf_tables: pass context to object destroy indirectionPablo Neira Ayuso1-1/+2
2018-05-17netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()Taehee Yoo1-8/+12
2018-03-20netfilter: nft_ct: add NFT_CT_{SRC,DST}_{IP,IP6}Pablo Neira Ayuso1-0/+38
2018-01-10netfilter: nf_tables: add single table list for all familiesPablo Neira Ayuso1-8/+8
2017-11-06netfilter: conntrack: move nf_ct_netns_{get,put}() to corePablo Neira Ayuso1-36/+3
2017-09-04netfilter: nf_tables: add select_ops for stateful objectsPablo M. Bermudo Garay1-6/+12
2017-05-15netfilter: introduce nf_conntrack_helper_put helper functionLiping Zhang1-2/+2
2017-04-19netfilter: nft_ct: allow to set ctnetlink event types of a connectionFlorian Westphal1-1/+24
2017-04-15netfilter: kill the fake untracked conntrack objectsFlorian Westphal1-8/+6
2017-04-07netfilter: Remove exceptional & on function nameArushi Singhal1-1/+1
2017-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-9/+12
2017-03-15netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalidLiping Zhang1-1/+2
2017-03-13netfilter: nft_ct: add helper set supportFlorian Westphal1-0/+171
2017-03-13netfilter: nf_tables: fix mismatch in big-endian systemLiping Zhang1-8/+10
2017-02-23netfilter: nft_ct: fix random validation errors for zone set supportFlorian Westphal1-0/+1
2017-02-08netfilter: nft_ct: add zone id set supportFlorian Westphal1-1/+143
2017-02-08netfilter: nft_ct: prepare for key-dependent error unwindFlorian Westphal1-14/+15
2017-02-08netfilter: nft_ct: add zone id get supportFlorian Westphal1-3/+19
2017-02-02netfilter: add and use nf_ct_set helperFlorian Westphal1-2/+1
2017-01-03netfilter: nft_ct: add average bytes per packet supportLiping Zhang1-1/+21
2016-12-04netfilter: add and use nf_ct_netns_get/putFlorian Westphal1-13/+13
2016-10-26netfilter: nft_ct: add notrack supportPablo Neira Ayuso1-1/+49
2016-09-25netfilter: nft_ct: report error if mark and dir specified simultaneouslyLiping Zhang1-0/+2
2016-09-25netfilter: nft_ct: unnecessary to require dir when use ct l3proto/protocolLiping Zhang1-10/+9
2016-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-16/+25
2016-07-22netfilter: conntrack: support a fixed size of 128 distinct labelsFlorian Westphal1-10/+3
2016-07-19netfilter: nft_ct: fix unpaired nf_connlabels_get/put callLiping Zhang1-6/+19
2016-07-11netfilter: nft_ct: make byte/packet expr more friendlyLiping Zhang1-0/+3
2016-07-08netfilter: nft_ct: fix expiration getterFlorian Westphal1-5/+1
2016-05-05netfilter: nftables: add connlabel set supportFlorian Westphal1-0/+30
2016-04-18netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used'Florian Westphal1-0/+2
2016-01-14netfilter: nft_ct: keep counters away from CONFIG_NF_CONNTRACK_LABELSPablo Neira Ayuso1-1/+1
2016-01-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-0/+38
2016-01-08netfilter: nft_ct: add byte/packet counter supportFlorian Westphal1-0/+38
2015-12-18netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL keyFlorian Westphal1-0/+1
2015-04-13netfilter: nf_tables: switch registers to 32 bit addressingPatrick McHardy1-2/+2
2015-04-13netfilter: nf_tables: add register parsing/dumping helpersPatrick McHardy1-4/+4
2015-04-13netfilter: nf_tables: convert expressions to u32 register pointersPatrick McHardy1-19/+19
2015-04-13netfilter: nf_tables: get rid of NFT_REG_VERDICT usagePatrick McHardy1-5/+5
2015-04-13netfilter: nf_tables: introduce nft_validate_register_load()Patrick McHardy1-1/+3
2015-04-13netfilter: nf_tables: kill nft_validate_output_register()Patrick McHardy1-4/+0
2015-04-13netfilter: nf_tables: rename nft_validate_data_load()Patrick McHardy1-2/+2
2015-04-13netfilter: nf_tables: validate len in nft_validate_data_load()Patrick McHardy1-7/+41
2015-04-08netfilter: Fix switch statement warnings with recent gcc.David Miller1-0/+8
2014-04-02netfilter: nft_ct: split nft_ct_init() into two functions for get/setPatrick McHardy1-53/+43
2014-04-02netfilter: nft_ct: add missing ifdef for NFT_MARK settingPatrick McHardy1-0/+2
2014-03-08netfilter: nft_ct: remove family from struct nft_ctPatrick McHardy1-7/+2
2014-03-08netfilter: nf_tables: restore context for expression destructorsPatrick McHardy1-1/+2
2014-02-19netfilter: nft_ct: labels get supportFlorian Westphal1-0/+24
2014-02-06netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checksPatrick McHardy1-0/+1
2014-02-05netfilter: nft_ct: fix unconditional dump of 'dir' attrArturo Borrero1-2/+13
2014-01-15netfilter: nft_ct: fix compilation warning if NF_CONNTRACK_MARK is not setKristian Evensen1-0/+2
2014-01-09netfilter: nft_ct: Add support to set the connmarkKristian Evensen1-30/+134
2014-01-07netfilter: nft_ct: load both IPv4 and IPv6 conntrack modules for NFPROTO_INETPatrick McHardy1-3/+36
2013-10-14netfilter: nf_tables: expression ops overloadingPatrick McHardy1-6/+12
2013-10-14netfilter: add nftablesPatrick McHardy1-0/+252
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-03 14:59:47 +0000