summaryrefslogtreecommitdiffstats
path: root/include/linux/netfilter
Commit message (Expand)AuthorAgeFilesLines
* extensions: nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro2019-08-201-0/+5
* extensions: libxt_owner: Add supplementary groups optionLukasz Pawelczyk2019-06-191-3/+4
* Revert "extensions: libxt_quota: Allow setting the remaining quota"Pablo Neira Ayuso2018-10-191-5/+3
* extensions: libxt_quota: Allow setting the remaining quotaChenbo Feng2018-10-091-3/+5
* extensions: add cgroup revision 2Pablo Neira Ayuso2018-09-181-3/+20
* include: update kernel netfilter header filesFlorian Westphal2018-06-172-5/+691
* extensions: libxt_CONNMARK: Support bit-shifting for --restore,set and save-markJack Ma2018-05-081-0/+5
* extensions: libipt_DNAT: support shifted portmap rangesThierry Du Tre2018-04-291-0/+15
* netfilter: xt_hashlimit: add rate match modeVishwanath Pai2017-09-081-6/+30
* extensions: libxt_bpf: support ebpf pinned objectsWillem de Bruijn2016-12-101-1/+24
* extensions: libxt_hashlimit: Create revision 2 of xt_hashlimit to support hig...Vishwanath Pai2016-10-041-1/+25
* extensions: libxt_NFLOG: nflog-range does not truncate packetsVishwanath Pai2016-07-011-1/+5
* libxt_cgroup2: add support for cgroup2 path matchingTejun Heo2015-12-231-0/+13
* libxt_cgroup: prepare for multi revisionsTejun Heo2015-12-231-1/+1
* libxt_CT: add support for recently introduced zone optionsDaniel Borkmann2015-09-291-0/+3
* extensions: libxt_socket: add --restore-skmark optionHarout Hedeshian2015-06-301-0/+8
* Alignment problem between 64bit kernel 32bit userspaceJozsef Kadlecsik2014-11-062-1/+16
* Merge branch 'ipset'Pablo Neira Ayuso2014-11-052-0/+20
|\
| * xtables: SET target: Add mapping of meta informations (skbinfo ipset extension)Anton Danilov2014-09-142-0/+20
* | refresh nf_tables.h cached copyPablo Neira Ayuso2014-10-091-1/+76
|/
* Merge branch 'next-3.14'Pablo Neira Ayuso2014-05-163-4/+35
|\
| * iptables: add libxt_cgroup frontendDaniel Borkmann2014-01-041-0/+11
| * iptables: snat: add randomize-full supportDaniel Borkmann2014-01-041-4/+8
| * iptables: Add IPv4/6 IPcomp match supportfan.du2013-12-241-0/+16
* | update FSF address in license textJiri Popelka2014-03-131-1/+1
* | include: Update nftables API header in sync with kernel's oneTomasz Bursztyka2013-12-301-7/+296
* | xtables: batch rule-set updates into one single netlink messagePablo Neira Ayuso2013-12-302-47/+4
* | xtables: nft: add protocol and flags for xtables over nf_tablesPablo Neira Ayuso2013-12-301-0/+14
* | xtables-restore: support atomic commitPablo Neira Ayuso2013-12-301-0/+8
* | nft: adapt chain rename to recent Patrick's updatesPablo Neira Ayuso2013-12-301-1/+2
* | xtables-restore: add support for dormant tablesPablo Neira Ayuso2013-12-301-0/+10
* | headers: remove unused compatibility definitionsPablo Neira Ayuso2013-12-301-18/+0
* | nft: Add support for chain rename options (-E)Tomasz Bursztyka2013-12-301-0/+1
* | headers: Make nf_tables.h up to dateTomasz Bursztyka2013-12-301-0/+2
* | use nf_tables and nf_tables compatibility interfacePablo Neira Ayuso2013-12-303-0/+538
|/
* extensions: libxt_set, libxt_SET: check the set family tooJozsef Kadlecsik2013-11-181-0/+9
* extensions: add SYNPROXY extensionPatrick McHardy2013-11-181-0/+16
* xt_socket: add --nowildcard flagEric Dumazet2013-08-061-0/+7
* libxt_CT: Add the "NOTRACK" aliasJozsef Kadlecsik2013-07-241-1/+4
* Introduce a new revision for the set match with the counters supportJozsef Kadlecsik2013-06-072-10/+51
* extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameterholger@eitzenberger.org2013-05-291-0/+9
* extensions: add connlabel matchFlorian Westphal2013-05-061-0/+12
* extensions: add libxt_bpf extensionWillem de Bruijn2013-04-021-0/+17
* Add the "state" alias to the "conntrack" matchJozsef Kadlecsik2013-01-281-0/+1
* Merge branch 'next' branch that contains new features scheduled forPablo Neira Ayuso2012-10-253-0/+61
|\
| * libxt_time: add support to ignore day transitionFlorian Westphal2012-09-301-0/+1
| * extensions: add IPv6 MASQUERADE extensionPatrick McHardy2012-09-101-0/+8
| * Convert the NAT targets to use the kernel supplied nf_nat.h headerPatrick McHardy2012-09-102-0/+52
* | New set match revision with --return-nomatch flag supportJozsef Kadlecsik2012-09-211-0/+2
|/
* libxt_recent: add --mask netmaskDenys Fedoryshchenko2012-07-311-0/+10