| .. |
| ipset | netfilter: ipset: Fix oversized kvmalloc() calls | 5 years ago |
| ipvs | net: sysctl: introduce sysctl SYSCTL_THREE | 4 years ago |
| core.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf | 4 years ago |
| Kconfig | netfilter: nf_tables: make counter support built-in | 4 years ago |
| Makefile | net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPF | 4 years ago |
| nf_conncount.c | netfilter: nf_conncount: reduce unnecessary GC | 4 years ago |
| nf_conntrack_acct.c | netfilter: conntrack: remove extension register api | 4 years ago |
| nf_conntrack_amanda.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_conntrack_bpf.c | net: netfilter: Reports ct direction in CT lookup helpers for XDP and TC-BPF | 4 years ago |
| nf_conntrack_broadcast.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_conntrack_core.c | netfilter: conntrack: fix crash due to confirmed bit load reordering | 4 years ago |
| nf_conntrack_ecache.c | netfilter: conntrack: add nf_conntrack_events autodetect mode | 4 years ago |
| nf_conntrack_expect.c | netfilter: conntrack: convert to refcount_t api | 4 years ago |
| nf_conntrack_extend.c | netfilter: extensions: introduce extension genid count | 4 years ago |
| nf_conntrack_ftp.c | netfilter: remove BUG_ON() after skb_header_pointer() | 5 years ago |
| nf_conntrack_h323_asn1.c | netfilter: Use fallthrough pseudo-keyword | 6 years ago |
| nf_conntrack_h323_main.c | netfilter: fix clang-12 fmt string warnings | 5 years ago |
| nf_conntrack_h323_types.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 484 | 7 years ago |
| nf_conntrack_helper.c | netfilter: conntrack: remove __nf_ct_unconfirmed_destroy | 4 years ago |
| nf_conntrack_irc.c | netfilter: remove BUG_ON() after skb_header_pointer() | 5 years ago |
| nf_conntrack_labels.c | netfilter: conntrack: remove extension register api | 4 years ago |
| nf_conntrack_netbios_ns.c | netfilter: nf_conntrack_netbios_ns: fix helper module alias | 4 years ago |
| nf_conntrack_netlink.c | netfilter: conntrack: fix crash due to confirmed bit load reordering | 4 years ago |
| nf_conntrack_pptp.c | netfilter: conntrack: pptp: use single option structure | 4 years ago |
| nf_conntrack_proto.c | netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*() | 4 years ago |
| nf_conntrack_proto_dccp.c | netfilter: conntrack: pass hook state to log functions | 5 years ago |
| nf_conntrack_proto_generic.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| nf_conntrack_proto_gre.c | netfilter: conntrack: nf_ct_gre_keymap_flush() removal | 5 years ago |
| nf_conntrack_proto_icmp.c | netfilter: conntrack: pass hook state to log functions | 5 years ago |
| nf_conntrack_proto_icmpv6.c | netfilter: conntrack: pass hook state to log functions | 5 years ago |
| nf_conntrack_proto_sctp.c | netfilter: conntrack: don't refresh sctp entries in closed state | 4 years ago |
| nf_conntrack_proto_tcp.c | netfilter: conntrack: remove pr_debug callsites from tcp tracker | 4 years ago |
| nf_conntrack_proto_udp.c | netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state | 5 years ago |
| nf_conntrack_sane.c | netfilter: remove BUG_ON() after skb_header_pointer() | 5 years ago |
| nf_conntrack_seqadj.c | netfilter: conntrack: remove extension register api | 4 years ago |
| nf_conntrack_sip.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_conntrack_snmp.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152 | 7 years ago |
| nf_conntrack_standalone.c | netfilter: conntrack: fix crash due to confirmed bit load reordering | 4 years ago |
| nf_conntrack_tftp.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_conntrack_timeout.c | netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*() | 4 years ago |
| nf_conntrack_timestamp.c | netfilter: conntrack: remove extension register api | 4 years ago |
| nf_dup_netdev.c | netfilter: nf_dup_netdev: add and use recursion counter | 4 years ago |
| nf_flow_table_core.c | netfilter: flowtable: move dst_check to packet path | 4 years ago |
| nf_flow_table_inet.c | netfilter: flowtable: Fix QinQ and pppoe support for inet table | 4 years ago |
| nf_flow_table_ip.c | netfilter: flowtable: move dst_check to packet path | 4 years ago |
| nf_flow_table_offload.c | netfilter: flowtable: remove redundant field in flow_offload_work struct | 4 years ago |
| nf_hooks_lwtunnel.c | netfilter: add netfilter hooks to SRv6 data plane | 5 years ago |
| nf_internals.h | netfilter: ctnetlink: add kernel side filtering for dump | 6 years ago |
| nf_log.c | netfilter: nft_log: perform module load from nf_tables | 5 years ago |
| nf_log_syslog.c | netfilter: nf_log: incorrect offset to network header | 4 years ago |
| nf_nat_amanda.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_nat_core.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 4 years ago |
| nf_nat_ftp.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_nat_helper.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | 7 years ago |
| nf_nat_irc.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_nat_masquerade.c | netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*() | 4 years ago |
| nf_nat_proto.c | netfilter: nat: move nf_xfrm_me_harder to where it is used | 5 years ago |
| nf_nat_redirect.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | 7 years ago |
| nf_nat_sip.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_nat_tftp.c | netfilter: nf_conntrack_sip: fix expectation clash | 7 years ago |
| nf_queue.c | netfilter: nf_queue: handle socket prefetch | 4 years ago |
| nf_sockopt.c | netfilter: switch nf_setsockopt to sockptr_t | 6 years ago |
| nf_synproxy_core.c | ip: Fix data-races around sysctl_ip_default_ttl. | 4 years ago |
| nf_tables_api.c | netfilter: nf_tables: replace BUG_ON by element length check | 4 years ago |
| nf_tables_core.c | netfilter: nf_tables: avoid skb access on nf_stolen | 4 years ago |
| nf_tables_offload.c | netfilter: nf_tables: bail out early if hardware offload is not supported | 4 years ago |
| nf_tables_trace.c | netfilter: nf_tables: avoid skb access on nf_stolen | 4 years ago |
| nfnetlink.c | netfilter: nfnetlink: fix warn in nfnetlink_unbind | 4 years ago |
| nfnetlink_acct.c | netfilter: use nfnetlink_unicast() | 5 years ago |
| nfnetlink_cthelper.c | Merge ra.kernel.org:/pub/scm/linux/kernel/git/netdev/net | 5 years ago |
| nfnetlink_cttimeout.c | netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit | 4 years ago |
| nfnetlink_hook.c | net: Don't include filter.h from net/sock.h | 4 years ago |
| nfnetlink_log.c | net: Get rcv tstamp if needed in nfnetlink_{log, queue}.c | 4 years ago |
| nfnetlink_osf.c | netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check | 5 years ago |
| nfnetlink_queue.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 4 years ago |
| nft_bitwise.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next | 4 years ago |
| nft_byteorder.c | netfilter: nf_tables: cancel tracking for clobbered destination registers | 4 years ago |
| nft_chain_filter.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 5 years ago |
| nft_chain_nat.c | netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec() | 5 years ago |
| nft_chain_route.c | netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec() | 5 years ago |
| nft_cmp.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_compat.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_connlimit.c | netfilter: nf_tables: memcg accounting for dynamically allocated objects | 4 years ago |
| nft_counter.c | netfilter: nf_tables: memcg accounting for dynamically allocated objects | 4 years ago |
| nft_ct.c | netfilter: nft_ct: track register operations | 4 years ago |
| nft_dup_netdev.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_dynset.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_exthdr.c | netfilter: nft_exthdr: add reduce support | 4 years ago |
| nft_fib.c | netfilter: nft_fib: reverse path filter for policy-based routing on iif | 4 years ago |
| nft_fib_inet.c | netfilter: nft_fib: add reduce support | 4 years ago |
| nft_fib_netdev.c | netfilter: nft_fib: add reduce support | 4 years ago |
| nft_flow_offload.c | netfilter: flowtable: fix nft_flow_route source address for nat case | 4 years ago |
| nft_fwd_netdev.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_hash.c | netfilter: nft_hash: track register operations | 4 years ago |
| nft_immediate.c | netfilter: nft_immediate: cancel register tracking for data destination register | 4 years ago |
| nft_last.c | netfilter: nf_tables: memcg accounting for dynamically allocated objects | 4 years ago |
| nft_limit.c | netfilter: nft_limit: Clone packet limits' cost value | 4 years ago |
| nft_log.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_lookup.c | netfilter: nft_lookup: only cancel tracking for clobbered dregs | 4 years ago |
| nft_masq.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_meta.c | netfilter: use get_random_u32 instead of prandom | 4 years ago |
| nft_nat.c | netfilter: nat: really support inet nat without l3 address | 4 years ago |
| nft_numgen.c | netfilter: use get_random_u32 instead of prandom | 4 years ago |
| nft_objref.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_osf.c | netfilter: nft_osf: track register operations | 4 years ago |
| nft_payload.c | netfilter: nf_tables: cancel tracking for clobbered destination registers | 4 years ago |
| nft_queue.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_quota.c | netfilter: nf_tables: memcg accounting for dynamically allocated objects | 4 years ago |
| nft_range.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_redir.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_reject.c | netfilter: nft_reject: unify reject init and dump into nft_reject | 6 years ago |
| nft_reject_inet.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_reject_netdev.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_rt.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_set_bitmap.c | netfilter: nf_tables: prefer direct calls for set lookups | 5 years ago |
| nft_set_hash.c | netfilter: nft_dynset: restore set element counter when failing to update | 4 years ago |
| nft_set_pipapo.c | netfilter: nft_set_pipapo: release elements in clone from abort path | 4 years ago |
| nft_set_pipapo.h | netfilter: nf_tables: prefer direct calls for set lookups | 5 years ago |
| nft_set_pipapo_avx2.c | netfilter: nft_set_pipapo_avx2: remove redundant pointer lt | 4 years ago |
| nft_set_pipapo_avx2.h | netfilter: nf_tables: prefer direct calls for set lookups | 5 years ago |
| nft_set_rbtree.c | netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion | 4 years ago |
| nft_socket.c | netfilter: nft_socket: only do sk lookups when indev is available | 4 years ago |
| nft_synproxy.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_tproxy.c | netfilter: nf_tables: do not reduce read-only expressions | 4 years ago |
| nft_tunnel.c | netfilter: nft_tunnel: track register operations | 4 years ago |
| nft_xfrm.c | netfilter: nft_xfrm: track register operations | 4 years ago |
| utils.c | netfilter: use actual socket sk rather than skb sk when routing harder | 6 years ago |
| x_tables.c | proc: remove PDE_DATA() completely | 4 years ago |
| xt_addrtype.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_AUDIT.c | netfilter: fix clang-12 fmt string warnings | 5 years ago |
| xt_bpf.c | bpf: Refactor BPF_PROG_RUN into a function | 5 years ago |
| xt_cgroup.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_CHECKSUM.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_CLASSIFY.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_cluster.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_comment.c | treewide: Add SPDX license identifier for more missed files | 7 years ago |
| xt_connbytes.c | netfilter: x_tables: use pr ratelimiting in all remaining spots | 8 years ago |
| xt_connlabel.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_connlimit.c | netfilter: update include directives. | 7 years ago |
| xt_connmark.c | netfilter: Replace HTTP links with HTTPS ones | 6 years ago |
| xt_CONNSECMARK.c | netfilter: Replace HTTP links with HTTPS ones | 6 years ago |
| xt_conntrack.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_cpu.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_CT.c | netfilter: conntrack: convert to refcount_t api | 4 years ago |
| xt_dccp.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_devgroup.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_DSCP.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | 7 years ago |
| xt_dscp.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_ecn.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_esp.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_hashlimit.c | proc: remove PDE_DATA() completely | 4 years ago |
| xt_helper.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_HL.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | 7 years ago |
| xt_hl.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_HMARK.c | netfilter: xt_HMARK: Use ip_is_fragment() helper | 6 years ago |
| xt_IDLETIMER.c | netfilter: xt_IDLETIMER: replace snprintf in show functions with sysfs_emit | 5 years ago |
| xt_ipcomp.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152 | 7 years ago |
| xt_iprange.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next | 7 years ago |
| xt_ipvs.c | treewide: Add SPDX license identifier for more missed files | 7 years ago |
| xt_l2tp.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_LED.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 164 | 7 years ago |
| xt_length.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_limit.c | netfilter: x_tables: improve limit_mt scalability | 5 years ago |
| xt_LOG.c | netfilter: log: work around missing softdep backend module | 5 years ago |
| xt_mac.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_mark.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_MASQUERADE.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_multiport.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_nat.c | netfilter: Add MODULE_DESCRIPTION entries to kernel modules | 6 years ago |
| xt_NETMAP.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_nfacct.c | netfilter: Remove unnecessary conversion to bool | 6 years ago |
| xt_NFLOG.c | netfilter: log: work around missing softdep backend module | 5 years ago |
| xt_NFQUEUE.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_osf.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13 | 7 years ago |
| xt_owner.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next | 7 years ago |
| xt_physdev.c | netfilter: inline xt_hashlimit, ebt_802_3 and xt_physdev headers | 7 years ago |
| xt_pkttype.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_policy.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_quota.c | treewide: Add SPDX license identifier for more missed files | 7 years ago |
| xt_RATEEST.c | net: sched: Merge Qdisc::bstats and Qdisc::cpu_bstats data types | 5 years ago |
| xt_rateest.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_realm.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_recent.c | proc: remove PDE_DATA() completely | 4 years ago |
| xt_REDIRECT.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_repldata.h | License cleanup: add SPDX GPL-2.0 license identifier to files with no license | 9 years ago |
| xt_sctp.c | treewide: Add SPDX license identifier for more missed files | 7 years ago |
| xt_SECMARK.c | netfilter: xt_SECMARK: add new revision to fix structure layout | 5 years ago |
| xt_set.c | netfilter: inline four headers files into another one. | 7 years ago |
| xt_socket.c | netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency | 4 years ago |
| xt_state.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_statistic.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_string.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_TCPMSS.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | 7 years ago |
| xt_tcpmss.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_TCPOPTSTRIP.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | 7 years ago |
| xt_tcpudp.c | treewide: Add SPDX license identifier for more missed files | 7 years ago |
| xt_TEE.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 3 | 7 years ago |
| xt_time.c | netfilter: Replace HTTP links with HTTPS ones | 6 years ago |
| xt_TPROXY.c | netfilter: disable defrag once its no longer needed | 5 years ago |
| xt_TRACE.c | netfilter: nf_log: add module softdeps | 5 years ago |