aboutsummaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal2-43/+49
2016-07-11netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang1-4/+10
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches2-32/+29
2016-07-01netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso1-4/+0
2016-06-24netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCPLiping Zhang1-0/+3
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal1-4/+2
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal1-0/+3
2016-05-05netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso2-385/+76
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal2-7/+5
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal1-2/+6
2016-05-05netfilter: conntrack: small refactoring of conntrack seq_printfFlorian Westphal1-5/+19
2016-04-29netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso2-4/+8
2016-04-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-455/+175
2016-04-14netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2-86/+10
2016-04-14netfilter: x_tables: remove obsolete checkFlorian Westphal2-15/+0
2016-04-14netfilter: x_tables: remove obsolete overflow check for compat case tooFlorian Westphal2-4/+0
2016-04-14netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2-217/+52
2016-04-14netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2-29/+14
2016-04-14netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal1-46/+36
2016-04-14netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal1-35/+24
2016-04-14netfilter: x_tables: check for bogus target offsetFlorian Westphal2-4/+6
2016-04-14netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal2-2/+4
2016-04-14netfilter: x_tables: kill check_entry helperFlorian Westphal2-23/+16
2016-04-14netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal2-21/+2
2016-04-14netfilter: x_tables: validate targets of jumpsFlorian Westphal2-0/+32
2016-04-14netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal2-3/+9
2016-04-07netfilter: arp_tables: register table in initnsFlorian Westphal1-0/+6
2016-03-28netfilter: ipv4: fix NULL dereferenceLiping Zhang1-26/+28
2016-03-28netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_EN...Pablo Neira Ayuso2-0/+4
2016-03-28netfilter: x_tables: fix unconditional helperFlorian Westphal2-21/+20
2016-03-28netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal2-4/+8
2016-03-28netfilter: x_tables: validate e->target_offset earlyFlorian Westphal2-18/+16
2016-03-14Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-22/+8
2016-03-14netfilter: Allow calling into nat helper without skb_dst.Jarno Rajahalme1-22/+8
2016-03-13ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller1-2/+10
2016-03-02netfilter: nft_masq: support port rangePablo Neira Ayuso1-1/+6
2016-03-02netfilter: xtables: don't hook tables by defaultFlorian Westphal8-96/+180
2016-03-02netfilter: xtables: prepare for on-demand hook registerFlorian Westphal8-46/+55
2016-03-02netfilter: nf_defrag_ipv4: Drop redundant ip_send_check()Joe Stringer1-3/+1
2016-02-16ipv4: Namespaceify ip_default_ttl sysctl knobNikolay Borisov1-1/+2
2016-01-28inet: frag: Always orphan skbs inside ip_defrag()Joe Stringer1-2/+0
2015-12-28netfilter: nf_tables: release objects on netns destructionPablo Neira Ayuso2-2/+2
2015-12-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-1/+0
2015-12-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2015-12-15net: Eliminate NETIF_F_GEN_CSUM and NETIF_F_V[46]_CSUMTom Herbert1-1/+2
2015-12-10netfilter: nf_dup: add missing dependencies with NF_CONNTRACKPablo Neira Ayuso1-0/+1
2015-11-23netfilter: remove duplicate includestephen hemminger1-1/+0
2015-11-18net ipv4: use preferred log methodsBastian Stender3-15/+15
2015-11-09netfilter: Fix removal of GRE expectation entries created by PPTPAnthony Lineham1-1/+1
2015-11-05ipv4: use sk_fullsock() in ipv4_conntrack_defrag()Eric Dumazet1-3/+2
Powered by cgit, Gruvboxed by Blaster4385.