summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2016-09-26netfilter: nf_tables: add range expressionPablo Neira Ayuso5-2/+178
2016-09-26netfilter: xt_socket: fix transparent match for IPv6 request socketsKOVACS Krisztian2-1/+1
2016-09-25netfilter: evict stale entries when user reads /proc/net/nf_conntrackFlorian Westphal1-0/+5
2016-09-25netfilter: xt_hashlimit: Create revision 2 to support higher pps ratesVishwanath Pai2-68/+285
2016-09-25netfilter: xt_hashlimit: Prepare for revision 2Vishwanath Pai1-30/+31
2016-09-25netfilter: nft_ct: report error if mark and dir specified simultaneouslyLiping Zhang1-0/+2
2016-09-25netfilter: nft_ct: unnecessary to require dir when use ct l3proto/protocolLiping Zhang1-10/+9
2016-09-25netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ackGao Feng1-8/+12
2016-09-25netfilter: replace list_head with single linked listAaron Conole10-116/+167
2016-09-25netfilter: nf_queue: whitespace cleanupAaron Conole1-4/+4
2016-09-24netfilter: Only allow sane values in nf_register_net_hookAaron Conole1-0/+5
2016-09-24netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole14-19/+19
2016-09-24netfilter: call nf_hook_ingress with rcu_read_lockAaron Conole1-1/+6
2016-09-24netfilter: call nf_hook_state_init with rcu_read_lock heldFlorian Westphal2-1/+8
2016-09-24netfilter: bridge: add and use br_nf_hook_threshFlorian Westphal3-16/+62
2016-09-24netfilter: xt_TCPMSS: Refactor the codes to decrease one condition check and ...Gao Feng1-8/+4
2016-09-23netfilter: nft_lookup: remove superfluous element found checkPablo Neira Ayuso1-1/+1
2016-09-23netfilter: xt_helper: Use sizeof(variable) instead of literal numberGao Feng1-1/+1
2016-09-23netfilter: Enhance the codes used to get random onceGao Feng3-17/+4
2016-09-23netfilter: nf_tables: check tprot_set first when we use xt.thoffLiping Zhang3-10/+19
2016-09-23netfilter: nf_tables: improve nft payload fast evalLiping Zhang1-1/+1
2016-09-23netfilter: nf_queue: improve queue range support for bridge familyLiping Zhang1-13/+43
2016-09-23netfilter: nft_queue: add _SREG_QNUM attr to select the queue numberLiping Zhang2-12/+92
2016-09-23netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana7-8/+60
2016-09-22netfilter: nft_numgen: add number generation offsetLaura Garcia Liebana2-6/+28
2016-09-13netfilter: nft_hash: fix hash overflow validationLaura Garcia Liebana1-1/+1
2016-09-12netfilter: nft_numgen: fix race between num generate and store itLiping Zhang1-1/+1
2016-09-12netfilter: conntrack: remove packet hotpath statsFlorian Westphal5-29/+11
2016-09-12netfilter: nf_queue: get rid of dependency on IP6_NF_IPTABLESLiping Zhang1-4/+0
2016-09-12netfilter: Add the missed return value check of nft_register_chain_typeGao Feng6-10/+33
2016-09-12netfilter: Add the missed return value check of register_netdevice_notifierGao Feng3-7/+28
2016-09-12netfilter: nf_conntrack: simplify __nf_ct_try_assign_helper() return logicPablo Neira1-9/+6
2016-09-12netfilter: nf_tables: don't drop IPv6 packets that cannot parse transportPablo Neira Ayuso3-10/+4
2016-09-12netfilter: nf_tables_bridge: use nft_set_pktinfo_ipv{4, 6}_validatePablo Neira Ayuso3-78/+45
2016-09-12netfilter: introduce nft_set_pktinfo_{ipv4, ipv6}_validate()Pablo Neira Ayuso3-77/+93
2016-09-12netfilter: nf_tables_ipv6: setup pktinfo transport field on failure to parsePablo Neira Ayuso1-2/+3
2016-09-12netfilter: nf_tables: ensure proper initialization of nft_pktinfo fieldsPablo Neira Ayuso7-5/+29
2016-09-12netfilter: nft_dynset: allow to invert match criteriaPablo Neira Ayuso2-1/+25
2016-09-12netfilter: nft_hash: Add hash offset valueLaura Garcia Liebana2-4/+15
2016-09-09netfilter: nf_conntrack: remove unused ctl_table_path member in nf_conntrack_...Liping Zhang1-4/+0
2016-09-09netfilter: nft_queue: check the validation of queues_total and queuenumLiping Zhang1-0/+11
2016-09-07netfilter: nf_ct_sip: allow tab character in SIP headersMarco Angaroni1-1/+1
2016-09-07netfilter: nft_quota: introduce nft_overquota()Pablo Neira Ayuso1-4/+4
2016-09-07netfilter: nft_quota: fix overquota logicPablo Neira Ayuso1-1/+1
2016-09-07netfilter: nft_numgen: rename until attribute by modulusLaura Garcia Liebana2-17/+17
2016-09-07netfilter: ftp: Remove the useless codeGao Feng1-12/+1
2016-09-07netfilter: ftp: Remove the useless dlen==0 condition check in find_patternGao Feng1-2/+0
2016-09-07netfilter: nf_ct_sip: correct allowed characters in Call-ID SIP headerMarco Angaroni1-2/+3
2016-09-07netfilter: nf_ct_sip: correct parsing of continuation lines in SIP headersMarco Angaroni1-2/+1
2016-09-07netfilter: gre: Use consistent GRE and PTTP header structure instead of the o...Gao Feng3-54/+13
generated by cgit v1.2.3 (git 2.39.0) at 2024-12-16 16:55:18 +0300