summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2016-07-05net: simplify and make pkt_type_ok() available for other usersJamal Hadi Salim1-8/+1
2016-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller5-18/+16
2016-06-15netfilter: nf_tables: fix a wrong check to skip the inactive rulesLiping Zhang1-1/+1
2016-06-15netfilter: nf_tables: fix wrong destroy anonymous sets if binding failsLiping Zhang1-6/+1
2016-06-15netfilter: nf_tables: reject loops from set element jump to chainPablo Neira Ayuso3-10/+11
2016-06-15netfilter: nf_tables: fix wrong check of NFT_SET_MAP in nf_tables_bind_setLiping Zhang1-1/+1
2016-06-15netfilter: conntrack: destroy kmemcache on module removalFlorian Westphal1-0/+2
2016-06-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller13-29/+40
2016-06-08net: sched: do not acquire qdisc spinlock in qdisc/class stats dumpEric Dumazet1-1/+1
2016-06-06ipvs: update real-server binding of outgoing connections in SIP-peMarco Angaroni2-4/+6
2016-06-02netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal1-2/+2
2016-06-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller10-23/+32
2016-05-31netfilter: nf_ct_helper: bail out on duplicated helpersPablo Neira Ayuso1-5/+4
2016-05-30netfilter: nf_tables: validate NFTA_SET_TABLE parameterPhil Turnbull1-0/+2
2016-05-30netfilter: nf_ct_helper: Fix helper unregister count.Taehee Yoo5-0/+5
2016-05-25netfilter: nf_queue: Make the queue_handler pernetEric W. Biederman2-15/+20
2016-05-25netfilter: conntrack: remove leftover binary sysctl defineFlorian Westphal1-2/+0
2016-05-21net: define gso types for IPx over IPv4 and IPv6Tom Herbert1-10/+7
2016-05-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-0/+4
2016-05-14nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds1-1/+3
2016-05-12netfilter: nfnetlink_queue: fix timestamp attributeFlorian Westphal1-1/+1
2016-05-10netfilter: conntrack: remove uninitialized shadow variableArnd Bergmann1-1/+0
2016-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller17-310/+726
2016-05-09netfilter: conntrack: use single slab cacheFlorian Westphal1-22/+14
2016-05-09netfilter: conntrack: use a single nat bysource table for all namespacesFlorian Westphal1-16/+17
2016-05-09netfilter: conntrack: make netns address part of nat bysrc hashFlorian Westphal1-3/+3
2016-05-06Merge tag 'ipvs2-for-v4.7' of https://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso2-4/+26
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal3-28/+22
2016-05-06netfilter: conntrack: make netns address part of expect hashFlorian Westphal1-7/+10
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal2-4/+27
2016-05-06ipvs: make drop_entry protection effective for SIP-peMarco Angaroni2-4/+26
2016-05-05netfilter: nfnetlink_acct: validate NFACCT_QUOTA parameterPhil Turnbull1-0/+2
2016-05-05netfilter: nf_tables: allow set names up to 32 bytesPablo Neira Ayuso1-3/+3
2016-05-05netfilter: conntrack: introduce clash resolution on insertion racePablo Neira Ayuso3-3/+54
2016-05-05netfilter: conntrack: introduce nf_ct_acct_update()Pablo Neira Ayuso1-23/+19
2016-05-05netfilter: conntrack: __nf_ct_l4proto_find() always returns valid pointerPablo Neira Ayuso1-1/+1
2016-05-05netfilter: conntrack: consider ct netns in early_drop logicFlorian Westphal1-18/+25
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal6-59/+56
2016-05-05netfilter: conntrack: make netns address part of hashFlorian Westphal1-17/+18
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal2-10/+16
2016-05-05netfilter: conntrack: use nf_ct_key_equal() in more placesFlorian Westphal1-18/+11
2016-05-05netfilter: conntrack: don't attempt to iterate over empty tableFlorian Westphal1-0/+3
2016-05-05netfilter: conntrack: fix lookup race during hash resizeFlorian Westphal1-5/+19
2016-05-05netfilter: conntrack: keep BH enabled during lookupFlorian Westphal1-17/+8
2016-05-05netfilter: nftables: add connlabel set supportFlorian Westphal1-0/+30
2016-04-29netfilter: IDLETIMER: fix race condition when destroy the targetLiping Zhang1-0/+1
2016-04-29netfilter: conntrack: init all_locks to avoid debug warningFlorian Westphal1-1/+1
2016-04-25netfilter/ipvs: use nla_put_u64_64bit()Nicolas Dichtel1-12/+24
2016-04-25Merge tag 'ipvs-for-v4.7' of https://git.kernel.org/pub/scm/linux/kernel/git/...Pablo Neira Ayuso5-5/+243
2016-04-25netfilter: nf_ct_helper: disable automatic helper assignmentPablo Neira Ayuso1-2/+2