summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2019-01-26netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is setTaehee Yoo1-1/+2
2018-08-24netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal1-0/+1
2018-07-17netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+1
2018-05-30netfilter: ipt_CLUSTERIP: put config instead of freeing itFlorian Westphal1-3/+4
2018-05-30netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcountFlorian Westphal1-2/+6
2018-05-22netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}Subash Abhinov Kasiviswanathan1-2/+4
2018-04-26netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal2-5/+13
2018-04-26netfilter: x_tables: add counters allocation wrapperFlorian Westphal2-2/+2
2018-04-08netfilter: drop template ct when conntrack is skipped.Paolo Abeni1-1/+13
2018-03-15netfilter: ipt_CLUSTERIP: fix a race condition of proc file creationCong Wang1-6/+6
2018-03-15netfilter: add back stackpointer size checksFlorian Westphal2-1/+10
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni1-1/+5
2018-02-25netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()Dmitry Vyukov1-3/+13
2017-11-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds1-0/+2
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman1-0/+1
2017-11-01netfilter: nf_reject_ipv4: Fix use-after-free in send_resetTejaswi Tanikella1-0/+2
2017-10-09netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hookLin Zhang1-1/+2
2017-09-08netfilter: xtables: add scheduling opportunity in get_countersFlorian Westphal2-0/+2
2017-09-04net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.Varsha Rao1-9/+3
2017-09-04net: Replace NF_CT_ASSERT() with WARN_ON().Varsha Rao3-8/+8
2017-09-04netfilter: remove unused hooknum arg from packet functionsFlorian Westphal1-1/+0
2017-09-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller12-84/+63
2017-08-24netfilter: conntrack: place print_tuple in procfs partFlorian Westphal2-19/+0
2017-08-24netfilter: conntrack: remove protocol name from l4proto structFlorian Westphal1-1/+0
2017-08-24netfilter: conntrack: remove protocol name from l3proto structFlorian Westphal1-1/+0
2017-08-24netfilter: conntrack: compute l3proto nla size at compile timeFlorian Westphal1-6/+7
2017-08-24netfilter: nf_nat_h323: fix logical-not-parentheses warningNick Desaulniers1-27/+30
2017-08-02netfilter: constify nf_loginfo structuresJulia Lawall3-3/+3
2017-08-02netfilter: xtables: Remove unused variable in compat_copy_entry_from_user()Taehee Yoo2-4/+0
2017-07-31netfilter: conntrack: do not enable connection tracking unless neededFlorian Westphal1-14/+2
2017-07-31netfilter: x_tables: Fix use-after-free in ipt_do_table.Taehee Yoo2-9/+10
2017-07-31netfilter: nf_hook_ops structs can be constFlorian Westphal5-5/+5
2017-07-31netfilter: nf_tables: fib: use skb_header_pointerPablo M. Bermudo Garay1-4/+16
2017-07-19netfilter: ipt_CLUSTERIP: fix use-after-free of proc entrySabrina Dubroca1-1/+3
2017-07-17netfilter: nf_tables: only allow in/output for arp packetsFlorian Westphal1-2/+1
2017-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-37/+82
2017-06-19netfilter: ipt_CLUSTERIP: do not hold devXin Long1-28/+73
2017-06-16networking: make skb_put & friends return void pointersJohannes Berg2-6/+6
2017-06-16networking: convert many more places to skb_put_zero()Johannes Berg1-2/+1
2017-05-29netfilter: conntrack: rename nf_ct_iterate_cleanupFlorian Westphal1-2/+2
2017-05-29netfilter: ipt_CLUSTERIP: switch to nf_register_net_hookFlorian Westphal1-7/+7
2017-05-20sk_buff: remove support for csum_bad in sk_buffDavide Caratti1-1/+1
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller10-99/+113
2017-05-01netfilter: snmp: avoid stack size warningFlorian Westphal1-6/+6
2017-04-26netfilter: don't attach a nat extension by defaultFlorian Westphal1-3/+1
2017-04-26netfilter: pptp: attach nat extension when neededFlorian Westphal1-4/+21
2017-04-26netfilter: masquerade: attach nat extension if not presentFlorian Westphal1-2/+3
2017-04-26netfilter: SYNPROXY: Return NF_STOLEN instead of NF_DROP during handshakingGao Feng1-7/+14
2017-04-26netfilter: synproxy: only register hooks when neededFlorian Westphal1-34/+39
2017-04-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+1