| .. |
| ipset | netfilter: ipset: remove need to allocate memory on delete operations | 3 months ago |
| ipvs | ipvs: fix reversed sequence option serialization | 3 months ago |
| core.c | netfilter: remove nf_ipv6_ops and use direct function calls | 7 months ago |
| Kconfig | netfilter: arp_tables: remove the 32bit compat interface | 2 months ago |
| Makefile | netfilter: allow nfnetlink built-in only | 7 months ago |
| nf_bpf_link.c | netfilter: bpf: defer hook memory release until rcu readers are done | 8 months ago |
| nf_conncount.c | netfilter: conncount: use DEBUG_NET_WARN_ON_ONCE on reaching count limit | 5 months ago |
| nf_conntrack_acct.c | netfilter: conntrack: remove extension register api | 4 years ago |
| nf_conntrack_amanda.c | netfilter: conntrack_helper: pass master conntrack to helper functions | 4 months ago |
| nf_conntrack_bpf.c | bpf: Fix netns reference imbalance in conntrack kfuncs | 3 months ago |
| nf_conntrack_broadcast.c | netfilter: nf_conntrack_expect: store event cache in expectation | 4 months ago |
| nf_conntrack_core.c | netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct() | 3 months ago |
| nf_conntrack_ecache.c | netfilter: nf_conntrack_expect: store event cache in expectation | 4 months ago |
| nf_conntrack_expect.c | netfilter: nf_conntrack_expect: consolidate check for insertion of dead expectation | 3 months ago |
| nf_conntrack_extend.c | netfilter: conntrack: revert ct extension genid infrastructure | 5 months ago |
| nf_conntrack_ftp.c | netfilter: conntrack_helper: pass master conntrack to helper functions | 4 months ago |
| nf_conntrack_h323_asn1.c | netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined | 7 months ago |
| nf_conntrack_h323_main.c | netfilter: conntrack: remove obsolete module parameters | 4 months ago |
| nf_conntrack_h323_types.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 484 | 7 years ago |
| nf_conntrack_helper.c | netfilter: nft_ct: move custom expectation support to helper | 3 months ago |
| nf_conntrack_irc.c | netfilter: conntrack_helper: pass master conntrack to helper functions | 4 months ago |
| nf_conntrack_labels.c | netfilter: conntrack: switch connlabels to atomic_t | 3 years ago |
| nf_conntrack_netbios_ns.c | netfilter: conntrack: remove obsolete module parameters | 4 months ago |
| nf_conntrack_netlink.c | netfilter: report NLM_F_DUMP_FILTERED when all is filtered out | 2 months ago |
| nf_conntrack_ovs.c | netfilter: conntrack: get rid of tuple in helper definitions | 4 months ago |
| nf_conntrack_pptp.c | netfilter: conntrack: remove obsolete module parameters | 4 months ago |
| nf_conntrack_proto.c | netfilter: nf_conntrack: defer invalid log until after unlock | 3 months ago |
| nf_conntrack_proto_generic.c | netfilter: nf_conntrack: Add allow_clash to generic protocol handler | 10 months ago |
| nf_conntrack_proto_gre.c | netfilter: conntrack: check NULL when retrieving ct extension | 5 months ago |
| nf_conntrack_proto_icmp.c | netfilter: nf_conntrack: enable icmp clash support | 11 months ago |
| nf_conntrack_proto_icmpv6.c | netfilter: nf_conntrack: enable icmp clash support | 11 months ago |
| nf_conntrack_proto_sctp.c | netfilter: nf_conntrack: defer invalid log until after unlock | 3 months ago |
| nf_conntrack_proto_tcp.c | Merge tag 'nf-next-26-08-10' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next | 3 months ago |
| nf_conntrack_proto_udp.c | udp: Support BIG TCP GSO packets where they can occur | 4 months ago |
| nf_conntrack_sane.c | netfilter: conntrack: remove obsolete module parameters | 4 months ago |
| nf_conntrack_seqadj.c | netfilter: conntrack: check NULL when retrieving ct extension | 5 months ago |
| nf_conntrack_sip.c | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 2 months ago |
| nf_conntrack_snmp.c | netfilter: conntrack: remove obsolete module parameters | 4 months ago |
| nf_conntrack_standalone.c | net: Const qualify ctl_tables that kmemdup unconditionally | 3 months ago |
| nf_conntrack_tftp.c | netfilter: conntrack_helper: pass master conntrack to helper functions | 4 months ago |
| nf_conntrack_timeout.c | netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount | 5 months ago |
| nf_conntrack_timestamp.c | netfilter: conntrack: remove extension register api | 4 years ago |
| nf_dup_netdev.c | Merge tag 'nf-next-26-06-14' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next | 5 months ago |
| nf_flow_table_bpf.c | bpf: Remove redundant KF_TRUSTED_ARGS flag from all kfuncs | 10 months ago |
| nf_flow_table_core.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 3 months ago |
| nf_flow_table_inet.c | net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_init() | 2 years ago |
| nf_flow_table_ip.c | netfilter: flowtable: detach layer 2 encapsulation parser from lookup | 3 months ago |
| nf_flow_table_offload.c | netfilter: flowtable: IPIP tunnel hardware offload is not yet support | 4 months ago |
| nf_flow_table_path.c | netfilter: flowtable: rename tun.l3_proto to tun.inner_proto | 3 months ago |
| nf_flow_table_procfs.c | netfilter: nf_flow_table: count pending offload workqueue tasks | 4 years ago |
| nf_flow_table_xdp.c | treewide: Replace kmalloc with kmalloc_obj for non-scalar types | 8 months ago |
| nf_hooks_lwtunnel.c | net: Const qualify network templated ctl_tables Arrays | 3 months ago |
| nf_internals.h | netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core | 2 years ago |
| nf_log.c | treewide: Replace kmalloc with kmalloc_obj for non-scalar types | 8 months ago |
| nf_log_syslog.c | netfilter: nf_log: unregister loggers before per-net teardown | 2 months ago |
| nf_nat_amanda.c | netfilter: conntrack_helper: pass master conntrack to helper functions | 4 months ago |
| nf_nat_bpf.c | bpf: Remove redundant KF_TRUSTED_ARGS flag from all kfuncs | 10 months ago |
| nf_nat_core.c | netfilter: nfnetlink_hook: Dump nat type chains | 7 months ago |
| nf_nat_ftp.c | netfilter: conntrack_helper: pass master conntrack to helper functions | 4 months ago |
| nf_nat_helper.c | net: Use helpers to get/set UDP len tree-wide | 4 months ago |
| nf_nat_irc.c | netfilter: conntrack_helper: pass master conntrack to helper functions | 4 months ago |
| nf_nat_masquerade.c | netfilter: remove nf_ipv6_ops and use direct function calls | 7 months ago |
| nf_nat_ovs.c | netfilter: nf_conntrack: don't rely on implicit includes | 11 months ago |
| nf_nat_proto.c | netfilter: nfnetlink_hook: Dump nat type chains | 7 months ago |
| nf_nat_redirect.c | netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses | 3 years ago |
| nf_nat_sip.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 3 months ago |
| nf_nat_tftp.c | netfilter: conntrack_helper: pass master conntrack to helper functions | 4 months ago |
| nf_queue.c | netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst | 5 months ago |
| nf_sockopt.c | netfilter: switch nf_setsockopt to sockptr_t | 6 years ago |
| nf_synproxy_core.c | netfilter: synproxy: fix unaligned memory access in timestamp adjustment | 5 months ago |
| nf_tables_api.c | treewide: refresh kmalloc_obj() conversions | 2 months ago |
| nf_tables_core.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nf_tables_offload.c | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path | 3 months ago |
| nf_tables_trace.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nfnetlink.c | net: Add SPDX ids to some source files | 8 months ago |
| nfnetlink_acct.c | netfilter: add more netlink-based policy range checks | 8 months ago |
| nfnetlink_cthelper.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 4 months ago |
| nfnetlink_cttimeout.c | Merge tag 'net-7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 2 months ago |
| nfnetlink_hook.c | netfilter: nfnetlink_hook: Dump nat type chains | 7 months ago |
| nfnetlink_log.c | netfilter: nfnetlink_log: cope with concurrent instance destruction | 2 months ago |
| nfnetlink_osf.c | netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures | 5 months ago |
| nfnetlink_queue.c | netfilter: validate L4 headers after userspace packet writes | 3 months ago |
| nft_bitwise.c | netfilter: nf_tables: fix dst corruption in same register operation | 6 months ago |
| nft_byteorder.c | netfilter: nft_byteorder: remove multi-register support | 6 months ago |
| nft_chain_filter.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 8 months ago |
| nft_chain_nat.c | netfilter: add missing module descriptions | 3 years ago |
| nft_chain_route.c | netfilter: nf_tables: remove unused arg in nft_set_pktinfo_unspec() | 5 years ago |
| nft_cmp.c | netfilter: nf_tables: add netlink policy based cap on registers | 8 months ago |
| nft_compat.c | netfilter: nft_compat: ebtables emulation must reject non-bridge targets | 5 months ago |
| nft_connlimit.c | netfilter: add more netlink-based policy range checks | 8 months ago |
| nft_counter.c | netfilter: nf_tables: remove register tracking infrastructure | 8 months ago |
| nft_ct.c | netfilter: nft_ct: move custom expectation support to helper | 3 months ago |
| nft_ct_fast.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nft_dup_netdev.c | netfilter: nf_tables: remove register tracking infrastructure | 8 months ago |
| nft_dynset.c | netfilter: nf_tables: skip double clone set expressions on element insert | 2 months ago |
| nft_exthdr.c | Merge tag 'nf-next-26-06-14' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next | 5 months ago |
| nft_fib.c | netfilter: nft_fib: reject fib expression on the netdev egress hook | 4 months ago |
| nft_fib_inet.c | netfilter: nf_tables: remove register tracking infrastructure | 8 months ago |
| nft_fib_netdev.c | netfilter: nft_fib: reject fib expression on the netdev egress hook | 4 months ago |
| nft_flow_offload.c | netfilter: nf_tables: remove register tracking infrastructure | 8 months ago |
| nft_fwd_netdev.c | netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them | 5 months ago |
| nft_hash.c | netfilter: nf_tables: add netlink policy based cap on registers | 8 months ago |
| nft_immediate.c | netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it | 7 months ago |
| nft_inner.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nft_last.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 8 months ago |
| nft_limit.c | netfilter: add more netlink-based policy range checks | 8 months ago |
| nft_log.c | netfilter: add more netlink-based policy range checks | 8 months ago |
| nft_lookup.c | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 4 months ago |
| nft_masq.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nft_meta.c | netfilter: nf_tables: call skb_valid_dst() before skb_dst() | 3 months ago |
| nft_nat.c | netfilter: nf_tables: remove register tracking infrastructure | 8 months ago |
| nft_numgen.c | netfilter: nf_tables: add netlink policy based cap on registers | 8 months ago |
| nft_objref.c | netfilter: nf_tables: add netlink policy based cap on registers | 8 months ago |
| nft_osf.c | netfilter: nf_tables: skip L4 header parsing for non-first fragments | 6 months ago |
| nft_payload.c | netfilter: validate L4 headers after userspace packet writes | 3 months ago |
| nft_queue.c | netfilter: add more netlink-based policy range checks | 8 months ago |
| nft_quota.c | netfilter: add more netlink-based policy range checks | 8 months ago |
| nft_range.c | netfilter: nf_tables: add netlink policy based cap on registers | 8 months ago |
| nft_redir.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nft_reject.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nft_reject_inet.c | netfilter: nf_tables: remove register tracking infrastructure | 8 months ago |
| nft_reject_netdev.c | netfilter: nf_tables: remove register tracking infrastructure | 8 months ago |
| nft_rt.c | netfilter: nf_tables: call skb_valid_dst() before skb_dst() | 3 months ago |
| nft_set_bitmap.c | netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation | 1 year ago |
| nft_set_hash.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nft_set_pipapo.c | netfilter: nft_set_pipapo: don't leak bad clone into future transaction | 5 months ago |
| nft_set_pipapo.h | netfilter: nft_set_pipapo: don't leak bad clone into future transaction | 5 months ago |
| nft_set_pipapo_avx2.c | netfilter: nft_set_pipapo_avx2: add missing vzeroupper | 3 months ago |
| nft_set_pipapo_avx2.h | netfilter: nft_set_pipapo: use avx2 algorithm for insertions too | 1 year ago |
| nft_set_rbtree.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net | 4 months ago |
| nft_socket.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nft_synproxy.c | netfilter: nft_synproxy: stop bypassing the priv->info snapshot | 5 months ago |
| nft_tproxy.c | netfilter: nf_tables: skip L4 header parsing for non-first fragments | 6 months ago |
| nft_tunnel.c | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 5 months ago |
| nft_xfrm.c | netfilter: nf_tables: call skb_valid_dst() before skb_dst() | 3 months ago |
| utils.c | netfilter: remove nf_ipv6_ops and use direct function calls | 7 months ago |
| x_tables.c | netfilter: x_tables: replace strlcat() with snprintf() | 4 months ago |
| xt_addrtype.c | netfilter: x_tables: add .check_hooks to matches and targets | 6 months ago |
| xt_AUDIT.c | audit: add audit_log_nf_skb helper function | 12 months ago |
| xt_bpf.c | bpf: Refactor BPF_PROG_RUN into a function | 5 years ago |
| xt_cgroup.c | netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited() | 2 months ago |
| xt_CHECKSUM.c | netfilter: xtables: avoid NFPROTO_UNSPEC where needed | 2 years ago |
| xt_CLASSIFY.c | netfilter: xtables: avoid NFPROTO_UNSPEC where needed | 2 years ago |
| xt_cluster.c | netfilter: xt_cluster: reject template conntracks in hash match | 5 months ago |
| xt_comment.c | treewide: Add SPDX license identifier for more missed files | 7 years ago |
| xt_connbytes.c | net: Add SPDX ids to some source files | 8 months ago |
| xt_connlabel.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_connlimit.c | net: Add SPDX ids to some source files | 8 months ago |
| xt_connmark.c | netfilter: xt_connmark: reject invalid shift parameters | 4 months ago |
| xt_CONNSECMARK.c | netfilter: xtables: avoid NFPROTO_UNSPEC where needed | 2 years ago |
| xt_conntrack.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_cpu.c | netfilter: xt_cpu: prefer raw_smp_processor_id | 5 months ago |
| xt_CT.c | netfilter: nf_conntrack_helper: add refcounting from datapath | 5 months ago |
| xt_dccp.c | netfilter: add deprecation warning for dccp support | 8 months ago |
| xt_devgroup.c | netfilter: x_tables: add .check_hooks to matches and targets | 6 months ago |
| xt_DSCP.c | netfilter: x_tables: use correct integer types | 4 years ago |
| xt_dscp.c | netfilter: xt_dscp: add checkentry for tos match | 4 months ago |
| xt_ecn.c | netfilter: xtables: fix L4 header parsing for non-first fragments | 6 months ago |
| xt_esp.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_hashlimit.c | netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH | 3 months ago |
| xt_helper.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_HL.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net | 7 years ago |
| xt_hl.c | netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited() | 2 months ago |
| xt_HMARK.c | netfilter: xt_HMARK: Use ip_is_fragment() helper | 6 years ago |
| xt_IDLETIMER.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_ipcomp.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_iprange.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_ipvs.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_l2tp.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_LED.c | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| xt_length.c | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf | 3 years ago |
| xt_limit.c | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| xt_LOG.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_mac.c | netfilter: xtables: restrict several matches to inet family | 7 months ago |
| xt_mark.c | netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds | 1 year ago |
| xt_MASQUERADE.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_multiport.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_nat.c | netfilter: xt_nat: reject unsupported target families | 5 months ago |
| xt_NETMAP.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_nfacct.c | netfilter: xt_nfacct: don't assume acct name is null-terminated | 1 year ago |
| xt_NFLOG.c | netfilter: xtables: fix typo causing some targets not to load on IPv6 | 2 years ago |
| xt_NFQUEUE.c | netfilter: xt_NFQUEUE: prefer raw_smp_processor_id | 5 months ago |
| xt_osf.c | netfilter: xtables: fix L4 header parsing for non-first fragments | 6 months ago |
| xt_owner.c | netfilter: xtables: restrict several matches to inet family | 7 months ago |
| xt_physdev.c | netfilter: xt_physdev: masks are not c-strings | 4 months ago |
| xt_pkttype.c | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 | 7 years ago |
| xt_policy.c | netfilter: x_tables: add .check_hooks to matches and targets | 6 months ago |
| xt_quota.c | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| xt_RATEEST.c | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| xt_rateest.c | netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() | 4 months ago |
| xt_realm.c | netfilter: xtables: restrict several matches to inet family | 7 months ago |
| xt_recent.c | netfilter: avoid strcpy usage | 5 months ago |
| xt_REDIRECT.c | netfilter: x_tables: remove pr_debug | 2 months ago |
| xt_repldata.h | netfilter: xtables: Use strscpy() instead of strscpy_pad() | 1 year ago |
| xt_SECMARK.c | netfilter: xtables: avoid NFPROTO_UNSPEC where needed | 2 years ago |
| xt_TCPMSS.c | netfilter: x_tables: add .check_hooks to matches and targets | 6 months ago |
| xt_TCPOPTSTRIP.c | netfilter: replace u_int8_t and u_int16t with u8 and u16 | 4 months ago |
| xt_TEE.c | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| xt_TPROXY.c | netfilter: xtables: fix L4 header parsing for non-first fragments | 6 months ago |
| xt_TRACE.c | netfilter: xtables: fix typo causing some targets not to load on IPv6 | 2 years ago |