summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2017-05-29netfilter: nf_tables: no size estimation if number of set elements is unknownPablo Neira Ayuso2-18/+7
2017-05-29netfilter: nft_set_hash: unnecessary forward declarationPablo Neira Ayuso1-10/+8
2017-05-29netfilter: nat: destroy nat mappings on module exit path onlyFlorian Westphal1-32/+5
2017-05-29netfilter: conntrack: restart iteration on resizeFlorian Westphal1-6/+14
2017-05-29netfilter: conntrack: add nf_ct_iterate_destroyFlorian Westphal1-13/+74
2017-05-29netfilter: conntrack: don't call iter for non-confirmed conntracksFlorian Westphal1-10/+29
2017-05-29netfilter: conntrack: rename nf_ct_iterate_cleanupFlorian Westphal4-12/+12
2017-05-29netfilter: nft_rt: make local functions staticstephen hemminger1-8/+8
2017-05-29netfilter: dup: resolve warnings about missing prototypesstephen hemminger1-0/+1
2017-05-29netfilter: ctnetlink: delete extra spaceslinzhang1-2/+2
2017-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller14-72/+227
2017-05-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller14-72/+227
2017-05-18netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPATWillem de Bruijn1-8/+13
2017-05-17tcp: switch TCP TS option (RFC 7323) to 1ms clockEric Dumazet1-1/+1
2017-05-15netfilter: nf_tables: revisit chain/object refcounting from elementsPablo Neira Ayuso5-17/+80
2017-05-15netfilter: nf_tables: missing sanitization in data from userspacePablo Neira Ayuso2-7/+24
2017-05-15netfilter: nf_tables: can't assume lock is acquired when dumping set elemsLiping Zhang2-23/+57
2017-05-15netfilter: synproxy: fix conntrackd interactionEric Leblond1-0/+4
2017-05-15netfilter: xtables: zero padding in data_to_userWillem de Bruijn1-3/+6
2017-05-15Merge tag 'ipvs-fixes-for-v4.12' of http://git.kernel.org/pub/scm/linux/kerne...Pablo Neira Ayuso1-5/+14
2017-05-15netfilter: nfnl_cthelper: reject del request if helper obj is in useLiping Zhang2-6/+17
2017-05-15netfilter: introduce nf_conntrack_helper_put helper functionLiping Zhang3-5/+11
2017-05-15netfilter: don't setup nat info for confirmed ctLiping Zhang1-0/+4
2017-05-15netfilter: ctnetlink: Make some parameters integer to avoid enum mismatchMatthias Kaehlcke1-4/+3
2017-05-10Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-4/+4
2017-05-09mm, vmalloc: use __GFP_HIGHMEM implicitlyMichal Hocko1-2/+1
2017-05-09treewide: use kv[mz]alloc* rather than opencoded variantsMichal Hocko2-21/+5
2017-05-08ipvs: SNAT packet replies only for NATed connectionsJulian Anastasov1-5/+14
2017-05-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds10-58/+113
2017-05-03Merge branch 'stable-4.12' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-98/+28
2017-05-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller9-57/+112
2017-05-03netfilter: conntrack: Force inlining of build check to prevent build failureGeert Uytterhoeven1-1/+1
2017-05-03netfilter: nf_tables: check if same extensions are set when adding elementsPablo Neira Ayuso1-0/+5
2017-05-02audit: normalize NETFILTER_PKTRichard Guy Briggs1-97/+27
2017-05-02netfilter: use consistent ipv4 network offset in xt_AUDITRichard Guy Briggs1-1/+1
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller70-506/+533
2017-05-01netfilter: nf_ct_ext: invoke destroy even when ext is not attachedLiping Zhang1-6/+2
2017-05-01Merge tag 'ipvs3-for-v4.12' of http://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso2-23/+1
2017-05-01netfilter: nf_queue: only call synchronize_net twice if nf_queue is activeFlorian Westphal4-22/+26
2017-05-01netfilter: nf_log: don't call synchronize_rcu in nf_log_unsetFlorian Westphal2-2/+1
2017-05-01netfilter: batch synchronize_net calls during hook unregisterFlorian Westphal1-6/+40
2017-04-28Merge tag 'ipvs-fixes-for-v4.11' of http://git.kernel.org/pub/scm/linux/kerne...Pablo Neira Ayuso1-5/+17
2017-04-28netfilter: x_tables: unlock on error in xt_find_table_lock()Dan Carpenter1-1/+3
2017-04-28ipvs: explicitly forbid ipv6 service/dest creation if ipv6 mod is disabledPaolo Abeni1-5/+17
2017-04-28ipvs: change comparison on sync_refresh_periodAaron Conole1-1/+1
2017-04-28ipvs: remove unused function ip_vs_set_state_timeoutAaron Conole1-22/+0
2017-04-26netfilter: don't attach a nat extension by defaultFlorian Westphal1-6/+0
2017-04-26netfilter: pptp: attach nat extension when neededFlorian Westphal1-2/+10
2017-04-26netfilter: conntrack: handle initial extension alloc via kreallocFlorian Westphal1-36/+15
2017-04-26netfilter: conntrack: mark extension structs as constFlorian Westphal8-9/+9