summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)AuthorFilesLines
2021-04-16netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal1-0/+2
2019-11-20netfilter: masquerade: don't flush all conntracks if only one address deleted...Tan Hu1-3/+16
2019-08-16netfilter: Fix rpfilter dropping vrf packets by mistakeMiaohe Lin1-2/+6
2019-07-21netfilter: ipv6: nf_defrag: accept duplicate fragments againGuillaume Nault1-3/+7
2019-07-21netfilter: ipv6: nf_defrag: fix leakage of unqueued fragmentsGuillaume Nault1-7/+5
2019-04-27net: IP6 defrag: use rbtrees in nf_conntrack_reasm.cPeter Oskolkov1-190/+72
2019-04-27ipv6: remove dependency of nf_defrag_ipv6 on ipv6 moduleFlorian Westphal2-7/+13
2018-12-17ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changesJiri Wiesner1-1/+7
2018-11-04Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"Sasha Levin1-2/+0
2018-09-19ip: frags: fix crash in ip_do_fragment()Taehee Yoo1-0/+1
2018-09-19net: sk_buff rbnode reorgEric Dumazet1-0/+1
2018-09-19ipv6: defrag: drop non-last frags smaller than min mtuFlorian Westphal1-0/+4
2018-09-19inet: frags: fix ip6frag_low_thresh boundaryEric Dumazet1-2/+0
2018-09-19inet: frags: break the 2GB limit for frags storageEric Dumazet1-5/+5
2018-09-19inet: frags: remove inet_frag_maybe_warn_overflow()Eric Dumazet1-3/+2
2018-09-19inet: frags: use rhashtables for reassembly unitsEric Dumazet1-38/+13
2018-09-19inet: frags: Convert timers to use timer_setup()Kees Cook1-2/+3
2018-09-19inet: frags: add a pointer to struct netns_fragsEric Dumazet1-7/+9
2018-09-19inet: frags: change inet_frags_init_net() return valueEric Dumazet1-3/+9
2018-09-15netfilter: ip6t_rpfilter: set F_IFACE for linklocal addressesFlorian Westphal1-1/+11
2018-08-24netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal1-0/+1
2018-08-24netfilter: ipv6: nf_defrag: reduce struct net memory wasteEric Dumazet1-3/+3
2018-07-22netfilter: ipv6: nf_defrag: drop skb dst before queueingFlorian Westphal1-0/+2
2018-07-17netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+1
2018-07-08netfilter: ip6t_rpfilter: provide input interface for route lookupVincent Bernat1-0/+2
2018-07-08netfilter: don't set F_IFACE on ipv6 fib lookupsFlorian Westphal2-14/+2
2018-06-20netfilter: nf_tables: NAT chain and extensions require NF_TABLESPablo Neira Ayuso1-27/+28
2018-05-22netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}Subash Abhinov Kasiviswanathan1-2/+4
2018-04-26netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal1-3/+7
2018-04-26netfilter: x_tables: add counters allocation wrapperFlorian Westphal1-1/+1
2018-04-26netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failureSubash Abhinov Kasiviswanathan1-0/+1
2018-04-26netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460Subash Abhinov Kasiviswanathan1-5/+10
2018-03-15netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pktFlorian Westphal1-0/+4
2018-03-15netfilter: add back stackpointer size checksFlorian Westphal1-0/+4
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni1-6/+12
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman1-0/+1
2017-10-09netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hookLin Zhang1-1/+1
2017-09-08netfilter: xtables: add scheduling opportunity in get_countersFlorian Westphal1-0/+1
2017-09-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-9/+3
2017-09-04net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.Varsha Rao1-9/+3
2017-09-04net: Replace NF_CT_ASSERT() with WARN_ON().Varsha Rao3-6/+6
2017-09-04netfilter: remove unused hooknum arg from packet functionsFlorian Westphal1-4/+2
2017-09-03Revert "net: fix percpu memory leaks"Jesper Dangaard Brouer1-9/+3
2017-08-28netfilter: conntrack: don't log "invalid" icmpv6 connectionsFlorian Westphal1-5/+0
2017-08-24netfilter: conntrack: place print_tuple in procfs partFlorian Westphal2-19/+0
2017-08-24netfilter: conntrack: remove protocol name from l4proto structFlorian Westphal1-1/+0
2017-08-24netfilter: conntrack: remove protocol name from l3proto structFlorian Westphal1-1/+0
2017-08-24netfilter: conntrack: compute l3proto nla size at compile timeFlorian Westphal1-6/+8
2017-08-02netfilter: constify nf_loginfo structuresJulia Lawall2-2/+2
2017-07-31netfilter: conntrack: do not enable connection tracking unless neededFlorian Westphal1-15/+2