aboutsummaryrefslogtreecommitdiffstats
path: root/include/linux/netfilter.h
AgeCommit message (Expand)AuthorFilesLines
2024-02-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+1
2024-02-29netfilter: bridge: confirm multicast packets before passing them up the stackFlorian Westphal1-0/+1
2024-02-21netfilter: move nf_reinject into nfnetlink_queue modulesFlorian Westphal1-1/+0
2023-10-18netfilter: make nftables drops visible in net dropmonitorFlorian Westphal1-0/+10
2023-07-28netfilter: defrag: Add glue hooks for enabling/disabling defragDaniel Xu1-0/+10
2023-06-26linux/netfilter.h: fix kernel-doc warningsRandy Dunlap1-2/+2
2023-04-21bpf: add bpf_link support for BPF_NETFILTER programsFlorian Westphal1-0/+1
2023-02-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski1-0/+5
2023-02-22netfilter: ctnetlink: make event listener tracking globalFlorian Westphal1-0/+5
2023-02-17netfilter: let reset rules clean out conntrack entriesFlorian Westphal1-0/+3
2022-08-22Remove DECnet support from kernelStephen Hemminger1-5/+0
2022-02-04netfilter: conntrack: handle ->destroy hook via nat_ops insteadFlorian Westphal1-0/+1
2022-01-09netfilter: make function op structures constFlorian Westphal1-4/+4
2022-01-09netfilter: core: move ip_ct_attach indirection to struct nf_ct_hookFlorian Westphal1-1/+1
2021-06-07netfilter: annotate nf_tables base hook opsFlorian Westphal1-1/+7
2021-05-29netfilter: reduce size of nf_hook_state on 32bit platformsFlorian Westphal1-2/+2
2021-01-25netfilter: ctnetlink: remove get_ct indirectionFlorian Westphal1-2/+0
2020-07-24netfilter: switch nf_setsockopt to sockptr_tChristoph Hellwig1-2/+4
2020-07-19netfilter: remove the compat_{get,set} methodsChristoph Hellwig1-14/+0
2019-10-17netfilter: add and use nf_hook_slow_list()Florian Westphal1-10/+31
2019-09-13netfilter: remove CONFIG_NETFILTER checks from headers.Jeremy Sowden1-1/+1
2019-09-13netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENA...Jeremy Sowden1-1/+1
2019-05-31netfilter: replace skb_make_writable with skb_ensure_writableFlorian Westphal1-5/+0
2019-05-06netfilter: slightly optimize nf_inet_addr_maskLi RongQing1-0/+9
2019-04-08netfilter: replace NF_NAT_NEEDED with IS_ENABLED(CONFIG_NF_NAT)Florian Westphal1-1/+1
2019-04-08netfilter: optimize nf_inet_addr_cmpLi RongQing1-0/+7
2019-01-06jump_label: move 'asm goto' support test to KconfigMasahiro Yamada1-2/+2
2018-09-28netfilter: avoid erronous array bounds warningFlorian Westphal1-0/+2
2018-07-10netfilter: Add nf_ct_get_tuple_skb global lookup functionToke Høiland-Jørgensen1-0/+11
2018-07-09netfilter: fix use-after-free in NF_HOOK_LISTEdward Cree1-3/+7
2018-07-04net: ipv4: listified version of ip_rcvEdward Cree1-0/+22
2018-06-12netfilter: fix null-ptr-deref in nf_nat_decode_sessionPrashant Bhole1-1/+1
2018-05-23netfilter: nfnetlink_queue: resolve clash for unconfirmed conntracksPablo Neira Ayuso1-0/+5
2018-05-23netfilter: add struct nf_nat_hook and use itPablo Neira Ayuso1-5/+16
2018-05-23netfilter: add struct nf_ct_hook and use itPablo Neira Ayuso1-1/+6
2018-05-23netfilter: lift one-nat-hook-only restrictionFlorian Westphal1-1/+0
2018-01-08netfilter: remove struct nf_afinfo and its helper functionsPablo Neira Ayuso1-13/+0
2018-01-08netfilter: remove route_key_size field in struct nf_afinfoPablo Neira Ayuso1-1/+0
2018-01-08netfilter: move reroute indirection to struct nf_ipv6_opsPablo Neira Ayuso1-2/+1
2018-01-08netfilter: move route indirection to struct nf_ipv6_opsPablo Neira Ayuso1-2/+2
2018-01-08netfilter: remove saveroute indirection in struct nf_afinfoPablo Neira Ayuso1-2/+0
2018-01-08netfilter: move checksum_partial indirection to struct nf_ipv6_opsPablo Neira Ayuso1-21/+3
2018-01-08netfilter: move checksum indirection to struct nf_ipv6_opsPablo Neira Ayuso1-16/+3
2018-01-08netfilter: core: only allow one nat hook per hook pointFlorian Westphal1-0/+1
2018-01-08netfilter: don't allocate space for arp/bridge hooks unless neededFlorian Westphal1-0/+4
2018-01-08netfilter: don't allocate space for decnet hooks unless neededFlorian Westphal1-0/+2
2018-01-08netfilter: reduce size of hook entry point locationsFlorian Westphal1-2/+22
2018-01-08netfilter: core: free hooks with call_rcuFlorian Westphal1-4/+15
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman1-0/+1
2017-08-28netfilter: convert hook list to an arrayAaron Conole1-22/+23
2017-07-17netfilter: remove old pre-netns era hook apiFlorian Westphal1-9/+0
2016-12-06netfilter: decouple nf_hook_entry and nf_hook_opsAaron Conole1-4/+6
2016-12-06netfilter: introduce accessor functions for hook entriesAaron Conole1-0/+27
2016-11-03netfilter: remove hook_entries field from nf_hook_statePablo Neira Ayuso1-6/+4
2016-11-03netfilter: kill NF_HOOK_THRESH() and state->treshPablo Neira Ayuso1-37/+13
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso1-0/+2
2016-09-25netfilter: replace list_head with single linked listAaron Conole1-29/+34
2016-09-24netfilter: call nf_hook_state_init with rcu_read_lock heldFlorian Westphal1-1/+7
2016-09-19net: Add _nf_(un)register_hooks symbolsMahesh Bandewar1-0/+2
2016-03-02netfilter: don't call hooks unless neededFlorian Westphal1-18/+11
2015-10-16netfilter: turn NF_HOOK into an inline functionArnd Bergmann1-2/+17
2015-10-16netfilter: remove hook owner refcountingFlorian Westphal1-1/+0
2015-10-05netfilter: ctnetlink: add const qualifier to nfnl_hook.get_ctKen-ichirou MATSUZAWA1-1/+1
2015-10-05netfilter: nfnetlink_queue: rename related to nfqueue attaching conntrack infoKen-ichirou MATSUZAWA1-2/+2
2015-10-04netfilter: nfnetlink_queue: get rid of nfnetlink_queue_ct.cPablo Neira Ayuso1-4/+8
2015-09-29netfilter: Push struct net down into nf_afinfo.rerouteEric W. Biederman1-1/+1
2015-09-18netfilter: Pass priv instead of nf_hook_ops to netfilter hooksEric W. Biederman1-1/+1
2015-09-17netfilter: Pass net into okfnEric W. Biederman1-12/+14
2015-09-17netfilter: Pass struct net into the netfilter hooksEric W. Biederman1-15/+12
2015-09-17netfilter: Pass net to nf_hook_threshEric W. Biederman1-4/+7
2015-09-17netfilter: Store net in nf_hook_stateEric W. Biederman1-1/+4
2015-09-17netfilter: Remove !CONFIG_NETFITLER definition of nf_hook_threshEric W. Biederman1-9/+0
2015-09-02netfilter: nf_conntrack: make nf_ct_zone_dflt built-inDaniel Borkmann1-0/+2
2015-07-23netfilter: rename local nf_hook_list to hook_listPablo Neira Ayuso1-7/+7
2015-07-15netfilter: move tee_active to coreFlorian Westphal1-0/+11
2015-07-15netfilter: Per network namespace netfilter hooks.Eric W. Biederman1-3/+11
2015-07-15netfilter: kill nf_hooks_activeEric W. Biederman1-7/+4
2015-06-18netfilter: don't pull include/linux/netfilter.h from netns headersPablo Neira Ayuso1-4/+2
2015-05-14netfilter: add netfilter ingress hook after handle_ing() under unique static keyPablo Neira1-0/+1
2015-05-14netfilter: add nf_hook_list_active()Pablo Neira1-5/+12
2015-05-14netfilter: add hook list to nf_hook_statePablo Neira1-2/+5
2015-05-14netfilter: cleanup struct nf_hook_ops indentationPablo Neira1-7/+7
2015-04-07netfilter: Pass socket pointer down through okfn().David Miller1-28/+34
2015-04-07netfilter: Add socket pointer to nf_hook_state.David Miller1-1/+6
2015-04-07netfilter: Add nf_hook_state initializer function.David Miller1-8/+18
2015-04-04netfilter: Make nf_hookfn use nf_hook_state.David S. Miller1-3/+1
2015-04-04netfilter: Create and use nf_hook_state.David S. Miller1-5/+23
2014-08-25netfilter: HAVE_JUMP_LABEL instead of CONFIG_JUMP_LABELZhouyi Zhou1-2/+3
2013-10-14netfilter: add nftablesPatrick McHardy1-5/+6
2013-10-14netfilter: pass hook ops to hookfnPatrick McHardy1-1/+2
2013-09-26netfilter: Remove extern from function prototypesJoe Perches1-5/+5
2013-08-28netfilter: nf_conntrack: make sequence number adjustments usuable without NATPatrick McHardy1-6/+3
2013-08-13netfilter: nfnetlink_queue: allow to attach expectations to conntracksPablo Neira Ayuso1-0/+2
2013-07-31netfilter: nf_nat: change sequence number adjustments to 32 bitsPatrick McHardy1-1/+1
2013-07-31netfilter: nf_conntrack: constify sk_buff argument to nf_ct_attach()Patrick McHardy1-2/+2
2013-05-23netfilter: don't panic on error while walking through the init pathPablo Neira Ayuso1-1/+1
2013-04-05netfilter: remove unneeded variable proc_net_netfilterPablo Neira Ayuso1-5/+0
2012-10-13UAPI: (Scripted) Disintegrate include/linuxDavid Howells1-71/+1
2012-08-30netfilter: add protocol independent NAT corePatrick McHardy1-8/+6
2012-06-22netfilter: nfnetlink_queue: fix compilation with CONFIG_NF_NAT=m and CONFIG_N...Pablo Neira Ayuso1-1/+5
2012-06-20netfilter: nfq_ct_hook needs __rcu and __read_mostlyPablo Neira Ayuso1-1/+1
2012-06-16netfilter: nfnetlink_queue: add NAT TCP sequence adjustment if packet mangledPablo Neira Ayuso1-0/+2
2012-06-16netfilter: add glue code to integrate nfnetlink_queue and ctnetlinkPablo Neira Ayuso1-0/+10
2012-06-07netfilter: xt_recent: add address masking optionDenys Fedoryshchenko1-0/+10
2012-04-20net: Delete all remaining instances of ctl_pathEric W. Biederman1-6/+0
2012-02-24static keys: Introduce 'struct static_key', static_key_true()/false() and sta...Ingo Molnar1-3/+3
2011-11-21netfilter: use jump_label for nf_hooksEric Dumazet1-5/+21
2011-05-27net: Add linux/sysctl.h includes where needed.David S. Miller1-0/+1
2011-04-04netfilter: af_info: add 'strict' parameter to limit lookup to .oifFlorian Westphal1-1/+1
2011-04-04netfilter: af_info: add network namespace parameter to route hookFlorian Westphal1-1/+2
2011-01-18netfilter: allow NFQUEUE bypass if no listener is availableFlorian Westphal1-0/+1
2011-01-18netfilter: reduce NF_VERDICT_MASK to 0xffFlorian Westphal1-5/+15
2011-01-13Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Simon Horman1-1/+3
2010-11-17netfilter: allow hooks to pass error code back up the stackEric Paris1-0/+2
2010-11-15netfilter: add __rcu annotationsEric Dumazet1-3/+3
2010-11-12netfilter: NF_HOOK_COND has wrong conditionalEric Paris1-1/+1
2010-02-19netfilter: restore POST_ROUTING hook in NF_HOOK_CONDPatrick McHardy1-2/+3
2010-02-15netfilter: get rid of the grossness in netfilter.hJan Engelhardt1-17/+28
2010-02-15netfilter: reduce NF_HOOK by one argumentJan Engelhardt1-9/+5
2010-02-02netfilter: xtables: CONFIG_COMPAT reduxAlexey Dobriyan1-3/+6
2009-11-04net: cleanup include/linuxEric Dumazet1-4/+2
2009-09-30net: Make setsockopt() optlen be unsigned.David S. Miller1-2/+2
2008-10-08netfilter: netns: remove nf_*_net() wrappersAlexey Dobriyan1-53/+0
2008-10-08netfilter: Introduce NFPROTO_* constantsJan Engelhardt1-2/+12
2008-10-08netfilter: Use unsigned types for hooknum and pf varsJan Engelhardt1-14/+16
2008-05-21netfilter: Move linux/types.h inclusions outside of #ifdef __KERNEL__Patrick McHardy1-1/+1
2008-04-14[NETFILTER]: Add partial checksum validation helperPatrick McHardy1-0/+22
2008-04-14[NETFILTER]: ip_tables: per-netns FILTER/MANGLE/RAW tables for realAlexey Dobriyan1-1/+53
2008-03-25[NETFILTER]: Add nf_inet_addr_cmp()Patrick McHardy1-0/+9
2008-02-27[NETFILTER]: Fix NF_QUEUE_NR() parenthesisPatrick McHardy1-1/+1
2008-02-19[NETFILTER]: Use __u32 in struct nf_inet_addrPatrick McHardy1-1/+1
2008-01-28[NETFILTER]: Extend nf_inet_addr with in{,6}_addrJan Engelhardt1-0/+4
2008-01-28[NETFILTER]: Use the ctl paths instead of hand-made analoguePavel Emelyanov1-6/+2
2008-01-28[NETFILTER]: Introduce nf_inet_addressJan Engelhardt1-0/+6
2008-01-28[NETFILTER]: nf_nat: properly use RCU for ip_nat_decode_sessionPatrick McHardy1-3/+8
2008-01-28[NETFILTER]: constify nf_afinfoPatrick McHardy1-5/+5
2008-01-28[NETFILTER]: Kill function prototype for non-existing functionPatrick McHardy1-3/+0
2008-01-28[NETFILTER]: nf_log: move logging stuff to seperate headerPatrick McHardy1-55/+0
2008-01-28[NETFILTER]: nf_queue: move list_head/skb/id to struct nf_infoPatrick McHardy1-3/+3
2008-01-28[NETFILTER]: nf_queue: move queueing related functions/struct to seperate headerPatrick McHardy1-30/+2
2008-01-28[NETFILTER]: nf_queue: remove unused data pointerPatrick McHardy1-2/+1
2008-01-28[NETFILTER]: nf_queue: make queue_handler constPatrick McHardy1-4/+4
2008-01-28[NETFILTER]: nf_ct_h323: remove ipv6 module dependencyPatrick McHardy1-0/+2
2008-01-28[NETFILTER]: Convert old checksum helper namesPatrick McHardy1-5/+0
2008-01-28[NET]: Move netfilter checksum helpers to net/core/utils.cPatrick McHardy1-21/+4
2008-01-28[NETFILTER]: Introduce NF_INET_ hook valuesPatrick McHardy1-0/+9
2007-10-15[NETFILTER]: Replace sk_buff ** with sk_buff *Herbert Xu1-12/+12
2007-10-15[NETFILTER]: Do not copy skb in skb_make_writableHerbert Xu1-1/+1
2007-09-11[NETFILTER]: Fix/improve deadlock condition on module removal netfilterNeil Horman1-3/+2
2007-07-10[NETFILTER]: nfnetlink_queue: don't unregister handler of other subsystemYasuyuki Kozakai1-1/+2
2007-04-25[NETFILTER]: nf_conntrack: kill destroy() in struct nf_conntrack for dietYasuyuki Kozakai1-0/+1
2007-04-25[NETFILTER]: nf_conntrack: don't use nfct in skb if conntrack is disabledYasuyuki Kozakai1-4/+7
2007-02-12[NETFILTER]: nf_log: minor cleanupsPatrick McHardy1-1/+1
2007-02-12[NETFILTER]: nf_log: make nf_log_unregister_pf return voidPatrick McHardy1-1/+1
2006-12-04[PATCH] fix fallout from header dependency trimmingAl Viro1-1/+0
2006-12-04netfilter.h needs rcuupdate.h for RCU locking functionsLinus Torvalds1-0/+1
2006-12-02[NETFILTER]: Add NAT support for nf_conntrackJozsef Kadlecsik1-1/+1
2006-12-02[NETFILTER]: nf_conntrack: automatic sysctl registation for conntrack protocolsPatrick McHardy1-0/+10
2006-12-02[NET]: netfilter checksum annotationsAl Viro1-5/+21
2006-12-02[NET]: Annotate __skb_checksum_complete() and friends.Al Viro1-3/+3
2006-09-22[NETFILTER]: Get rid of HW checksum invalidationPatrick McHardy1-0/+6
2006-04-26Don't include linux/config.h from anywhere else in include/David Woodhouse1-1/+0
2006-04-09[NETFILTER]: Add address family specific checksum helpersPatrick McHardy1-0/+17
2006-04-09[NETFILTER]: Introduce infrastructure for address family specific operationsPatrick McHardy1-7/+16
2006-04-09[NETFILTER]: Add helper functions for mass hook registration/unregistrationPatrick McHardy1-0/+2
2006-03-20[NET]: {get|set}sockopt compatibility layerDmitry Mishin1-0/+9
2006-02-15[NETFILTER]: Don't invoke okfn in CONFIG_NETFILTER=n variant of nf_hook()Patrick McHardy1-1/+1
2006-02-15[XFRM]: Fix SNAT-related crash in xfrm4_output_finishPatrick McHardy1-4/+15
2006-01-07[NETFILTER]: Add dummy nf_hook{_thresh}() when NETFILTER is disabled.David S. Miller1-0/+15
2006-01-07[NETFILTER]: Handle NAT in IPsec policy checksPatrick McHardy1-0/+16
2006-01-07[XFRM]: Netfilter IPsec output hooksPatrick McHardy1-24/+37
2005-08-29[NETFILTER]: Fix gcc-3.4.x warning about iplicit operator precedenceHarald Welte1-1/+1
2005-08-29[NETFILTER]: Fix NF_QUEUE_NR() macroHarald Welte1-1/+1
2005-08-29[NETFILTER]: check nf_log function call argumentsHarald Welte1-1/+1
2005-08-29[NETFILTER]: add /proc/net/netfilter interface to nf_queueHarald Welte1-5/+8
2005-08-29[NETFILTER]: Extend netfilter logging APIHarald Welte1-3/+45
2005-08-29[NETFILTER]: Core changes required by upcoming nfnetlink_queue codeHarald Welte1-1/+13
2005-08-29[NETFILTER]: Move reroute-after-queue code up to the nf_queue layer.Harald Welte1-0/+11
2005-08-29[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()Harald Welte1-0/+5
2005-08-29[NETFILTER]: reduce netfilter sk_buff enlargementHarald Welte1-0/+3
2005-04-16Linux-2.6.12-rc2v2.6.12-rc2Linus Torvalds1-0/+199
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-20 18:38:13 +0000