aboutsummaryrefslogtreecommitdiffstats
path: root/net/bridge/netfilter
AgeCommit message (Expand)AuthorFilesLines
2024-04-11netfilter: br_netfilter: skip conntrack input hook for promisc packetsPablo Neira Ayuso1-4/+10
2024-04-04netfilter: validate user input for expected lengthEric Dumazet1-0/+6
2024-02-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+30
2024-02-29netfilter: bridge: confirm multicast packets before passing them up the stackFlorian Westphal1-0/+30
2024-01-29netfilter: ebtables: allow xtables-nft only buildsFlorian Westphal2-1/+8
2023-11-14netfilter: nf_conntrack_bridge: initialize err to 0Linkui Xiao1-1/+1
2023-11-08netfilter: add missing module descriptionsFlorian Westphal5-0/+5
2023-08-22netfilter: ebtables: fix fortify warnings in size_entry_mwt()GONG, Ruiqi1-2/+1
2023-03-08netfilter: bridge: introduce broute meta statementSriram Yagnaraman1-3/+68
2023-02-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski1-1/+1
2023-02-22netfilter: ebtables: fix table blob use-after-freeFlorian Westphal1-1/+1
2023-02-01bridge: use skb_ip_totlen in br netfilterXin Long1-2/+2
2022-11-30netfilter: conntrack: merge ipv4+ipv6 confirm functionsFlorian Westphal1-31/+1
2022-09-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+3
2022-09-20netfilter: ebtables: fix memory leak when blob is malformedFlorian Westphal1-1/+3
2022-08-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-31/+1
2022-08-23netfilter: ebtables: reject blobs that don't provide all entry pointsFlorian Westphal4-31/+1
2022-08-22bridge: move from strlcpy with unused retval to strscpyWolfram Sang1-1/+1
2022-07-11netfilter: nf_tables: add and use BE register load-store helpersFlorian Westphal1-1/+1
2022-03-20netfilter: nft_meta: extend reduce support to bridge familyFlorian Westphal1-0/+1
2022-03-20netfilter: nf_tables: cancel tracking for clobbered destination registersPablo Neira Ayuso1-2/+2
2022-03-20netfilter: nf_tables: do not reduce read-only expressionsPablo Neira Ayuso1-0/+1
2022-03-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski1-1/+1
2022-03-07netfilter: bridge: clean up some inconsistent indentingJiapeng Chong1-1/+1
2022-03-03net: Add skb->mono_delivery_time to distinguish mono delivery_time from (rcv)...Martin KaFai Lau1-2/+3
2022-01-27netfilter: nft_reject_bridge: Fix for missing reply from preroutingPhil Sutter1-4/+4
2022-01-09netfilter: nft_meta: cancel register tracking after meta updatePablo Neira Ayuso1-0/+20
2021-11-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-3/+4
2021-10-22netfilter: ebtables: use array_size() helper in copy_{from,to}_user()Gustavo A. R. Silva1-3/+4
2021-10-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-1/+3
2021-10-18netfilter: ebtables: allocate chainstack on CPU local nodesDavidlohr Bueso1-1/+3
2021-10-14netfilter: ebtables: allow use of ebt_do_table as hookfnFlorian Westphal4-23/+10
2021-08-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+6
2021-08-04netfilter: nf_conntrack_bridge: Fix memory leak when errorYajun Deng1-0/+6
2021-08-02netfilter: ebtables: do not hook tables by defaultFlorian Westphal4-23/+137
2021-04-26netfilter: allow to turn off xtables compat layerFlorian Westphal4-12/+12
2021-04-26netfilter: ebtables: remove the 3 ebtables pointers from struct netFlorian Westphal4-51/+54
2021-04-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-6/+49
2021-04-10netfilter: bridge: add pre_exit hooks for ebtable unregistrationFlorian Westphal4-6/+48
2021-04-06netfilter: ebtables: use net_generic infraFlorian Westphal1-5/+34
2021-03-31netfilter: nf_log_bridge: merge with nf_log_syslogFlorian Westphal3-86/+0
2021-01-27netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso1-3/+2
2020-11-22netfilter: nft_reject_bridge: fix build errors due to code movementRandy Dunlap1-0/+2
2020-10-31netfilter: nft_reject: unify reject init and dump into nft_rejectJose M. Guisado Gomez1-58/+2
2020-10-31netfilter: nf_reject: add reject skbuff creation helpersJose M. Guisado Gomez2-192/+5
2020-10-20netfilter: ebtables: Fixes dropping of small packets in bridge natTimothée COCAULT3-3/+3
2020-09-08netfilter: ebt_stp: Remove unused macro BPDU_TYPE_TCNWang Hai1-1/+0
2020-08-14netfilter: ebtables: reject bogus getopt len valueFlorian Westphal1-0/+4
2020-08-13netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependencyFlorian Westphal1-2/+6
2020-08-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-nextLinus Torvalds1-137/+115
2020-08-04Merge tag 'audit-pr-20200803' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-3/+3
2020-08-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-1/+1
2020-07-24netfilter: switch nf_setsockopt to sockptr_tChristoph Hellwig1-20/+17
2020-07-24netfilter: remove the unused user argument to do_update_countersChristoph Hellwig1-5/+4
2020-07-22netfilter: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2020-07-19netfilter/ebtables: clean up compat {get, set}sockopt handlingChristoph Hellwig1-116/+98
2020-06-29audit: add gfp parameter to audit_log_nfcfgRichard Guy Briggs1-3/+3
2020-06-25netfilter: Add MODULE_DESCRIPTION entries to kernel modulesRob Gill2-0/+2
2020-06-02Merge tag 'audit-pr-20200601' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-8/+6
2020-06-02mm: remove the pgprot argument to __vmallocChristoph Hellwig1-4/+2
2020-05-25netfilter: nft_reject_bridge: enable reject with bridge vlanMichael Braun1-0/+6
2020-04-28netfilter: add audit table unregister actionsRichard Guy Briggs1-0/+2
2020-04-28audit: tidy and extend netfilter_cfg x_tablesRichard Guy Briggs1-8/+4
2020-03-15netfilter: Replace zero-length array with flexible-array memberGustavo A. R. Silva1-1/+1
2019-12-20netfilter: ebtables: compat: reject all padding in matches/watchersFlorian Westphal1-17/+16
2019-11-04bridge: ebtables: don't crash when using dnat target in output chainsFlorian Westphal1-4/+15
2019-10-21ipv4: fix IPSKB_FRAG_PMTU handling with fragmentationEric Dumazet1-1/+1
2019-10-18net: ensure correct skb->tstamp in various fragmentersEric Dumazet1-0/+3
2019-09-13netfilter: move nf_bridge_frag_data struct definition to a more appropriate h...Jeremy Sowden1-7/+7
2019-09-13netfilter: update include directives.Jeremy Sowden1-1/+0
2019-09-13netfilter: inline xt_hashlimit, ebt_802_3 and xt_physdev headersJeremy Sowden1-1/+7
2019-08-30netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorderwenxu1-1/+1
2019-08-19netfilter: ebtables: Fix argument order to ADD_COUNTERTodd Seidelmann1-4/+4
2019-07-30netfilter: ebtables: also count base chain policiesFlorian Westphal1-11/+17
2019-07-25netfilter: nft_meta_bridge: Eliminate 'out' labelPhil Sutter1-3/+1
2019-07-25netfilter: nf_tables: Make nft_meta expression more robustPhil Sutter1-5/+1
2019-07-21netfilter: ebtables: fix a memory leak bug in compatWenwen Wang1-1/+3
2019-07-19netfilter: bridge: make NF_TABLES_BRIDGE tristateArnd Bergmann1-1/+1
2019-07-18netfilter: bridge: NF_CONNTRACK_BRIDGE does not depend on NF_TABLES_BRIDGEPablo Neira Ayuso1-2/+2
2019-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds7-3/+625
2019-07-09Merge tag 'docs-5.3' of git://git.lwn.net/linuxLinus Torvalds1-1/+1
2019-07-05netfilter: nft_meta_bridge: Add NFT_META_BRI_IIFVPROTO supportwenxu1-0/+12
2019-07-05netfilter: nft_meta_bridge: add NFT_META_BRI_IIFPVID supportwenxu1-0/+15
2019-07-05netfilter: nft_meta_bridge: Remove the br_private.h headerwenxu1-5/+14
2019-07-05netfilter: nft_meta: move bridge meta keys into nft_meta_bridgewenxu3-0/+134
2019-06-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso3-13/+3
2019-06-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-8/+2
2019-06-21netfilter: bridge: Fix non-untagged fragment packetwenxu1-0/+2
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner2-8/+2
2019-06-14docs: kbuild: convert docs to ReST and rename to *.rstMauro Carvalho Chehab1-1/+1
2019-06-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-5/+1
2019-05-31netfilter: bridge: convert skb_make_writable to skb_ensure_writableFlorian Westphal3-3/+3
2019-05-30netfilter: nf_conntrack_bridge: add support for IPv6Pablo Neira Ayuso1-2/+57
2019-05-30netfilter: bridge: add connection tracking systemPablo Neira Ayuso3-0/+395
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152Thomas Gleixner1-5/+1
2019-05-21treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13Thomas Gleixner1-13/+1
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner1-0/+1
2019-05-21treewide: Add SPDX license identifier for more missed filesThomas Gleixner19-0/+19
2019-05-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-1/+3
2019-05-09netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last ruleFlorian Westphal1-1/+3
2019-04-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+2
2019-04-22netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ONFlorian Westphal1-1/+2
2019-04-12bridge: broute: make broute a real ebtables tableFlorian Westphal2-25/+45
2019-03-01netfilter: convert the proto argument from u8 to u16Li RongQing1-3/+3
2019-02-27netfilter: ebtables: remove BUGPRINT messagesFlorian Westphal1-92/+39
2019-02-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-5/+5
2019-02-13netfilter: reject: skip csum verification for protocols that don't support itAlin Nastac1-5/+5
2019-01-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-3/+6
2019-01-28netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are presentFlorian Westphal1-3/+6
2019-01-18net: Fix usage of pskb_trim_rcsumRoss Lagerwall1-0/+1
2019-01-11netfilter: ebtables: account ebt_table_info to kmemcgShakeel Butt1-2/+4
2018-08-03netfilter: bridge: Expose nf_tables bridge hook priorities through uapiMáté Eckl2-0/+2
2018-07-16netfilter: nft_reject_bridge: remove unnecessary ttl setTaehee Yoo1-2/+1
2018-06-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds2-6/+21
2018-06-12treewide: Use array_size() in vmalloc()Kees Cook1-5/+6
2018-06-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2-6/+21
2018-06-08netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+2
2018-06-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds4-177/+29
2018-06-06Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+1
2018-06-06netfilter: ebtables: reject non-bridge targetsFlorian Westphal1-0/+13
2018-06-04netfilter: ebtables: fix compat entry paddingAlin Nastac1-5/+5
2018-06-04netfilter: nft_reject_bridge: fix skb allocation size in nft_reject_br_send_v...Taehee Yoo1-1/+1
2018-06-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+2
2018-05-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+2
2018-05-17netfilter: ebtables: handle string from userspace with carePaolo Abeni1-1/+2
2018-05-14audit: use inline function to get audit contextRichard Guy Briggs1-1/+1
2018-05-08netfilter: bridge: stp fix reference to uninitialized dataStephen Hemminger1-2/+2
2018-05-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller4-177/+29
2018-04-24netfilter: merge meta_bridge into nft_metaFlorian Westphal3-143/+0
2018-04-24netfilter: ebtables: add ebt_get_target and ebt_get_target_cTaehee Yoo1-9/+13
2018-04-24netfilter: ebtables: remove EBT_MATCH and EBT_NOMATCHTaehee Yoo1-1/+1
2018-04-24netfilter: ebtables: add ebt_free_table_info functionTaehee Yoo1-24/+15
2018-04-09netfilter: ebtables: don't attempt to allocate 0-sized compat arrayFlorian Westphal1-5/+6
2018-03-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller6-126/+94
2018-03-30netfilter: nf_tables: build-in filter chain typePablo Neira Ayuso3-83/+1
2018-03-30netfilter: nf_tables: nft_register_chain_type() returns voidPablo Neira Ayuso1-1/+3
2018-03-30netfilter: nf_tables: rename struct nf_chain_typePablo Neira Ayuso1-1/+1
2018-03-30netfilter: ebt_stp: Use generic functions for comparisonsJoe Perches1-4/+2
2018-03-30netfilter: ebtables: Add support for specifying match revisionBernie Harris1-18/+29
2018-03-27net: Drop pernet_operations::asyncKirill Tkhai4-4/+0
2018-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-1/+39
2018-03-20netfilter: ebtables: add support for matching IGMP typeMatthias Schiffer1-2/+17
2018-03-20netfilter: ebtables: add support for matching ICMP type and codeMatthias Schiffer1-10/+33
2018-03-20netfilter: ebtables: use ADD_COUNTER macroTaehee Yoo1-11/+6
2018-03-11netfilter: bridge: ebt_among: add more missing match size checksFlorian Westphal1-0/+34
2018-03-11netfilter: ebtables: fix erroneous reject of last ruleFlorian Westphal1-1/+5
2018-03-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-12/+49
2018-03-05netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal1-2/+8
2018-03-05net: Convert log pernet_operationsKirill Tkhai1-0/+1
2018-03-05net: Convert broute_net_ops, frame_filter_net_ops and frame_nat_net_opsKirill Tkhai3-0/+3
2018-02-25netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsetsFlorian Westphal1-1/+12
2018-02-25netfilter: ebtables: convert BUG_ONs to WARN_ONsFlorian Westphal1-9/+18
2018-02-25netfilter: bridge: ebt_among: add missing match size checksFlorian Westphal1-2/+19
2018-02-14netfilter: bridge: use pr ratelimitingFlorian Westphal2-7/+7
2018-01-19netfilter: remove messages print and boot/module load timePablo Neira Ayuso1-2/+0
2018-01-10netfilter: nf_tables: get rid of struct nft_af_info abstractionPablo Neira Ayuso1-23/+2
2018-01-10netfilter: nf_tables: get rid of pernet familiesPablo Neira Ayuso1-33/+5
2018-01-10netfilter: nf_tables: remove nhooks field from struct nft_af_infoPablo Neira Ayuso1-1/+0
2018-01-08netfilter: remove struct nf_afinfo and its helper functionsPablo Neira Ayuso1-12/+4
2018-01-08netfilter: move reroute indirection to struct nf_ipv6_opsPablo Neira Ayuso1-7/+0
2018-01-08netfilter: move route indirection to struct nf_ipv6_opsPablo Neira Ayuso1-7/+0
2018-01-08netfilter: remove saveroute indirection in struct nf_afinfoPablo Neira Ayuso1-6/+0
2018-01-08netfilter: move checksum_partial indirection to struct nf_ipv6_opsPablo Neira Ayuso1-8/+0
2018-01-08netfilter: move checksum indirection to struct nf_ipv6_opsPablo Neira Ayuso1-7/+0
2018-01-08netfilter: nf_tables: remove hooks from family definitionPablo Neira Ayuso1-7/+7
2018-01-08netfilter: nf_tables: remove multihook chains and familiesPablo Neira Ayuso1-1/+0
2018-01-08netfilter: nf_tables: explicit nft_set_pktinfo() call from hook pathPablo Neira Ayuso1-3/+5
2018-01-08netfilter: don't allocate space for arp/bridge hooks unless neededFlorian Westphal1-0/+2
2017-11-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-2/+1
2017-11-06netfilter: ebtables: clean up initialization of bufColin Ian King1-2/+1
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman1-0/+1
2017-09-29netfilter: ebtables: fix race condition in frame_filter_net_init()Artem Savkov4-14/+15
2017-09-04net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.Varsha Rao1-12/+8
2017-09-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller5-14/+9
2017-08-28bridge: make ebt_table constBhumika Goyal1-1/+1
2017-08-24netfilter: ebtables: fix indent on if statementsColin Ian King2-3/+3
2017-08-19netfilter: use audit_log()Geliang Tang1-9/+4
2017-07-31netfilter: nf_hook_ops structs can be constFlorian Westphal2-2/+2
2017-07-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-0/+1
2017-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller4-4/+4
2017-06-29netfilter: ebt_nflog: fix unexpected truncated packetLiping Zhang1-0/+1
2017-06-20net: manual clean code which call skb_put_[data:zero]yuan linyu1-4/+2
2017-06-19netfilter: ebt: Use new helper ebt_invalid_target to check targetGao Feng4-4/+4
2017-06-16networking: make skb_push & __skb_push return void pointersJohannes Berg1-1/+1
2017-06-16networking: introduce and use skb_put_data()Johannes Berg1-4/+2
2017-06-16networking: convert many more places to skb_put_zero()Johannes Berg1-4/+2
2017-05-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-3/+9
2017-05-19sk_buff: remove support for csum_bad in sk_buffDavide Caratti1-4/+1
2017-05-16ebtables: arpreply: Add the standard target sanity checkGao Feng1-0/+3
2017-05-15netfilter: xtables: zero padding in data_to_userWillem de Bruijn1-3/+6
2017-05-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-0/+20
2017-04-26ebtables: remove nf_hook_register usageFlorian Westphal4-49/+46
2017-04-25bridge: ebtables: fix reception of frames DNAT-ed to bridge device/portLinus Lüssing1-0/+20
2017-04-07netfilter: Remove exceptional & on function nameArushi Singhal1-1/+1
2017-04-07netfilter: Remove unnecessary cast on void pointersimran singhal1-1/+1
2017-03-06netfilter: nf_tables: validate the expr explicitly after init successfullyLiping Zhang1-5/+1
2017-03-06netfilter: Use pr_cont where appropriateJoe Perches1-17/+17
2017-02-27lib/vsprintf.c: remove %Z supportAlexey Dobriyan1-1/+1
2017-02-02netfilter: allow logging from non-init namespacesMichal Kubeček1-1/+1
2017-01-09xtables: extend matches and targets with .usersizeWillem de Bruijn1-0/+1
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-30 05:39:29 +0000