Pablo Neira Ayuso c46b38dc87 netfilter: nft_payload: support for inner header matching / mangling ...

Allow to match and mangle on inner headers / payload data after the
transport header. There is a new field in the pktinfo structure that
stores the inner header offset which is calculated only when requested.
Only TCP and UDP supported at this stage.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2021-11-01 09:31:03 +01:00

..

ipv4

netfilter: disable defrag once its no longer needed

2021-04-26 03:20:07 +02:00

ipv6

netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1

2021-09-28 13:04:55 +02:00

br_netfilter.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_conntrack_acct.h

netfilter: conntrack: add nf_ct_acct_add()

2020-03-30 02:05:39 +02:00

nf_conntrack_bridge.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_conntrack_core.h

netfilter: conntrack: nf_ct_gre_keymap_flush() removal

2021-07-02 02:07:01 +02:00

nf_conntrack_count.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nf_conntrack_ecache.h

netfilter: ecache: remove nf_exp_event_notifier structure

2021-08-25 12:50:38 +02:00

nf_conntrack_expect.h

netfilter: fix coding-style errors.

2019-09-13 11:39:38 +02:00

nf_conntrack_extend.h

netfilter: Replace zero-length array with flexible-array member

2020-03-15 15:20:16 +01:00

nf_conntrack_helper.h

treewide: Use sizeof_field() macro

2019-12-09 10:36:44 -08:00

nf_conntrack_l4proto.h

netfilter: conntrack: pass hook state to log functions

2021-06-18 14:47:43 +02:00

nf_conntrack_labels.h

netfilter: fix include guards.

2019-09-13 11:39:38 +02:00

nf_conntrack_seqadj.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

nf_conntrack_synproxy.h

netfilter: conntrack: wrap two inline functions in config checks.

2019-09-13 12:47:10 +02:00

nf_conntrack_timeout.h

netfilter: Replace zero-length array with flexible-array member

2020-03-15 15:20:16 +01:00

nf_conntrack_timestamp.h

netfilter: conntrack: remove two unused functions from nf_conntrack_timestamp.h.

2019-09-13 12:48:09 +02:00

nf_conntrack_tuple.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_conntrack_zones.h

netfilter: conntrack: remove CONFIG_NF_CONNTRACK checks from nf_conntrack_zones.h.

2019-09-13 12:47:41 +02:00

nf_conntrack.h

netfilter: nftables: add nf_ct_pernet() helper function

2021-06-07 12:23:37 +02:00

nf_dup_netdev.h

netfilter: nft_{fwd,dup}_netdev: add offload support

2019-09-10 22:44:29 +02:00

nf_flow_table.h

netfilter: flowtable: Set offload timeouts according to proto values

2021-06-07 12:23:38 +02:00

nf_hooks_lwtunnel.h

netfilter: add netfilter hooks to SRv6 data plane

2021-08-30 01:51:36 +02:00

nf_log.h

netfilter: nf_log_common: merge with nf_log_syslog

2021-03-31 22:34:10 +02:00

nf_nat_helper.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nf_nat_masquerade.h

netfilter: update include directives.

2019-09-13 12:33:06 +02:00

nf_nat_redirect.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nf_nat.h

netfilter: nat: move nf_xfrm_me_harder to where it is used

2021-04-26 03:20:07 +02:00

nf_queue.h

netfilter: nf_queue: move hookfn registration out of struct net

2021-08-10 17:32:00 +02:00

nf_reject.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nf_socket.h

netfilter: Decrease code duplication regarding transparent socket option

2018-06-03 00:02:01 +02:00

nf_synproxy.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_tables_core.h

netfilter: nf_tables: add last expression

2021-06-17 03:23:00 +02:00

nf_tables_ipv4.h

netfilter: nf_tables: convert pktinfo->tprot_set to flags field

2021-11-01 09:30:20 +01:00

nf_tables_ipv6.h

netfilter: nf_tables: convert pktinfo->tprot_set to flags field

2021-11-01 09:30:20 +01:00

nf_tables_offload.h

netfilter: nftables: counter hardware offload support

2021-04-18 22:04:49 +02:00

nf_tables.h

netfilter: nft_payload: support for inner header matching / mangling

2021-11-01 09:31:03 +01:00

nf_tproxy.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

2018-07-20 22:28:28 -07:00

nft_fib.h

netfilter: nftables: add nft_parse_register_store() and use it

2021-01-27 23:16:02 +01:00

nft_meta.h

netfilter: nftables: add nft_parse_register_store() and use it

2021-01-27 23:16:02 +01:00

nft_reject.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

xt_rateest.h

net: sched: Merge Qdisc::bstats and Qdisc::cpu_bstats data types

2021-10-18 12:54:41 +01:00