aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2015-09-01netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error pathsDaniel Borkmann3-3/+4
2015-09-01ipvs: support scheduling inverse and icmp SCTP packetsAlex Gartrell1-17/+23
2015-09-01ipvs: support scheduling inverse and icmp UDP packetsAlex Gartrell1-9/+18
2015-09-01ipvs: support scheduling inverse and icmp TCP packetsAlex Gartrell1-11/+28
2015-09-01ipvs: ensure that ICMP cannot be sent in reply to ICMPAlex Gartrell1-2/+3
2015-09-01ipvs: attempt to schedule icmp packetsAlex Gartrell4-9/+55
2015-09-01ipvs: sh: support scheduling icmp/inverse packets consistentlyAlex Gartrell1-24/+21
2015-09-01ipvs: Use outer header in ip_vs_bypass_xmit_v6Alex Gartrell1-1/+3
2015-09-01ipvs: add schedule_icmp sysctlAlex Gartrell1-1/+7
2015-09-01ipvs: Make ip_vs_schedule aware of inverse iph'esAlex Gartrell1-14/+36
2015-09-01ipvs: drop inverse argument to conn_{in,out}_getAlex Gartrell4-29/+33
2015-09-01ipvs: pull out ip_vs_try_to_schedule functionAlex Gartrell1-21/+39
2015-09-01ipvs: Handle inverse and icmp headers in ip_vs_leaveAlex Gartrell1-12/+21
2015-09-01ipvs: Add hdr_flags to iphdrAlex Gartrell3-12/+12
2015-09-01ipvs: replace ip_vs_fill_ip4hdr with ip_vs_fill_iph_skb_offAlex Gartrell2-51/+34
2015-08-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller8-136/+387
2015-08-29netfilter: nfnetlink: work around wrong endianess in res_id fieldPablo Neira Ayuso1-1/+7
2015-08-29netfilter: ipset: Fixing unnamed union initElad Raz2-4/+36
2015-08-28netfilter: reduce sparse warningsFlorian Westphal2-6/+3
2015-08-28netfilter: ipset: Out of bound access in hash:net* types fixedJozsef Kadlecsik1-4/+8
2015-08-27netfilter: connlabels: Export setting connlabel lengthJoe Stringer2-12/+36
2015-08-27netfilter: Always export nf_connlabels_replace()Joe Stringer1-2/+0
2015-08-26Merge tag 'ipvs2-for-v4.3' of https://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso5-128/+382
2015-08-21netfilter: xt_TEE: use IS_ENABLED(CONFIG_NF_DUP_IPV6)Pablo Neira Ayuso1-2/+2
2015-08-21ipvs: add more mcast parameters for the sync daemonJulian Anastasov2-24/+164
2015-08-21ipvs: add sync_maxlen parameter for the sync daemonJulian Anastasov2-94/+96
2015-08-21ipvs: call rtnl_lock earlyJulian Anastasov2-19/+33
2015-08-21ipvs: Add ovf schedulerRaducu Deaconu3-0/+98
2015-08-21Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso10-23/+21
2015-08-19netfilter: nft_payload: work around vlan header strippingFlorian Westphal1-1/+56
2015-08-17net: Change pseudohdr argument of inet_proto_csum_replace* to be a boolTom Herbert8-14/+15
2015-08-18netfilter: nf_conntrack: add efficient mark to zone mappingDaniel Borkmann3-38/+22
2015-08-18netfilter: nf_conntrack: add direction support for zonesDaniel Borkmann6-88/+210
2015-08-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-10/+7
2015-08-11netfilter: nf_conntrack: push zone object into functionsDaniel Borkmann10-97/+143
2015-08-07netfilter: nfacct: per network namespace supportAndreas Schultz2-22/+51
2015-08-07netfilter: nft_limit: add per-byte limitingPablo Neira Ayuso1-4/+59
2015-08-07netfilter: nft_limit: constant token cost per packetPablo Neira Ayuso1-7/+18
2015-08-07netfilter: nft_limit: add burst parameterPablo Neira Ayuso1-2/+18
2015-08-07netfilter: nft_limit: factor out shared code with per-byte limitingPablo Neira Ayuso1-33/+53
2015-08-07netfilter: nft_limit: convert to token-based limiting at nanosecond granularityPablo Neira Ayuso1-16/+26
2015-08-07netfilter: nft_limit: rename to nft_limit_pktsPablo Neira Ayuso1-6/+6
2015-08-07netfilter: factor out packet duplication for IPv4/IPv6Pablo Neira Ayuso2-152/+8
2015-08-07netfilter: xt_TEE: get rid of WITH_CONNTRACK definitionPablo Neira Ayuso1-5/+3
2015-08-07netfilter: nft_counter: convert it to use per-cpu countersPablo Neira Ayuso1-28/+69
2015-08-05netfilter: conntrack: Use flags in nf_ct_tmpl_alloc()Joe Stringer1-2/+2
2015-08-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller9-102/+297
2015-07-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller11-77/+163
2015-07-30netfilter: nf_conntrack: checking for IS_ERR() instead of NULLDan Carpenter2-5/+4
2015-07-30netfilter: nf_ct_sctp: minimal multihoming supportMichal Kubeček1-24/+77