linux/include/net/netfilter
Pablo Neira Ayuso fca05d4d61 netfilter: nft_dynset: honor stateful expressions in set definition
If the set definition contains stateful expressions, allocate them for
the newly added entries from the packet path.

Fixes: 65038428b2 ("netfilter: nf_tables: allow to specify stateful expression in set definition")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2021-01-16 18:57:26 +01:00
..
ipv4 netfilter: use actual socket sk for REJECT action 2020-12-01 14:33:55 +01:00
ipv6 netfilter: use actual socket sk for REJECT action 2020-12-01 14:33:55 +01:00
br_netfilter.h
nf_conntrack_acct.h
nf_conntrack_bridge.h
nf_conntrack_core.h
nf_conntrack_count.h
nf_conntrack_ecache.h
nf_conntrack_expect.h
nf_conntrack_extend.h
nf_conntrack_helper.h
nf_conntrack_l4proto.h netfilter: ctnetlink: add timeout and protoinfo to destroy events 2020-12-12 11:44:42 +01:00
nf_conntrack_labels.h
nf_conntrack_seqadj.h
nf_conntrack_synproxy.h
nf_conntrack_timeout.h
nf_conntrack_timestamp.h
nf_conntrack_tuple.h
nf_conntrack_zones.h
nf_conntrack.h A set of locking fixes and updates: 2020-08-10 19:07:44 -07:00
nf_dup_netdev.h
nf_flow_table.h
nf_log.h netfilter: nf_log: missing vlan offload tag and proto 2020-10-14 01:25:14 +02:00
nf_nat_helper.h
nf_nat_masquerade.h
nf_nat_redirect.h
nf_nat.h
nf_queue.h
nf_reject.h
nf_socket.h
nf_synproxy.h
nf_tables_core.h netfilter: nf_tables: Implement fast bitwise expression 2020-10-04 21:08:33 +02:00
nf_tables_ipv4.h netfilter: nf_tables: add inet ingress support 2020-10-12 01:57:34 +02:00
nf_tables_ipv6.h netfilter: nf_tables: add inet ingress support 2020-10-12 01:57:34 +02:00
nf_tables_offload.h netfilter: nftables_offload: build mask based from the matching bytes 2020-11-27 12:10:47 +01:00
nf_tables.h netfilter: nft_dynset: honor stateful expressions in set definition 2021-01-16 18:57:26 +01:00
nf_tproxy.h
nft_fib.h
nft_meta.h
nft_reject.h
xt_rateest.h