summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2015-06-23netfilter: nf_qeueue: Drop queue entries on nf_unregister_hookEric W. Biederman4-1/+42
2015-06-23netfilter: nftables: Do not run chains in the wrong network namespaceEric W. Biederman1-1/+6
2015-06-18netfilter: use forward declaration instead of including linux/proc_fs.hPablo Neira Ayuso1-0/+1
2015-06-18netfilter: Kill unused copies of RCV_SKB_FAILEric W. Biederman2-4/+0
2015-06-18netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flagHarout Hedeshian1-6/+53
2015-06-18netfilter: nfnetlink_queue: add security context informationRoman Kubiak1-1/+34
2015-06-16netfilter: nf_tables_netdev: unregister hooks on net_device removalPablo Neira Ayuso2-4/+87
2015-06-16netfilter: nf_tables: add nft_register_basechain() and nft_unregister_basecha...Pablo Neira Ayuso1-15/+37
2015-06-16netfilter: nf_tables: attach net_device to basechainPablo Neira Ayuso1-37/+42
2015-06-15netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference.Eric Dumazet1-20/+12
2015-06-15Merge branch 'master' of git://blackhole.kfki.hu/nf-nextPablo Neira Ayuso21-1270/+1261
2015-06-15netfilter: Kconfig: get rid of parens around depends onPablo Neira Ayuso1-9/+9
2015-06-14netfilter: ipset: Fix coding styles reported by checkpatch.plJozsef Kadlecsik21-289/+322
2015-06-14netfilter: ipset: Introduce RCU locking in list typeJozsef Kadlecsik1-209/+189
2015-06-14netfilter: ipset: Introduce RCU locking in hash:* typesJozsef Kadlecsik12-236/+364
2015-06-14netfilter: ipset: Introduce RCU locking in bitmap:* typesJozsef Kadlecsik4-14/+38
2015-06-14netfilter: ipset: Prepare the ipset core to use RCU at set levelJozsef Kadlecsik1-22/+22
2015-06-14netfilter:ipset Remove rbtree from hash:net,ifaceJozsef Kadlecsik1-143/+20
2015-06-14netfilter: ipset: Make sure listing doesn't grab a set which is just being de...Jozsef Kadlecsik1-15/+34
2015-06-14netfilter: ipset: Fix parallel resizing and listing of the same setJozsef Kadlecsik2-15/+58
2015-06-14netfilter: ipset: Fix cidr handling for hash:*net* typesJozsef Kadlecsik7-34/+42
2015-06-14netfilter: ipset: Check CIDR value only when attribute is givenSergey Popovich4-49/+41
2015-06-14netfilter: ipset: Make sure we always return line number on batchSergey Popovich15-75/+75
2015-06-14netfilter: ipset: Permit CIDR equal to the host address CIDR in IPv6Sergey Popovich5-15/+43
2015-06-14netfilter: ipset: Check extensions attributes before getting extensions.Sergey Popovich16-170/+29
2015-06-14netfilter: ipset: Use SET_WITH_*() helpers to test set extensionsSergey Popovich2-7/+7
2015-06-12netfilter: xtables: avoid percpu ruleset duplicationFlorian Westphal1-15/+8
2015-06-12netfilter: conntrack: warn the user if there is a better helper to useMarcelo Ricardo Leitner1-1/+7
2015-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller4-5/+231
2015-05-26netfilter: nf_tables: add netdev table to filter from ingressPablo Neira Ayuso3-0/+189
2015-05-26netfilter: nf_tables: allow to bind table to net_devicePablo Neira Ayuso1-5/+41
2015-05-26netfilter: default CONFIG_NETFILTER_INGRESS to yPablo Neira Ayuso1-0/+1
2015-05-25ipv6: Set FLOWI_FLAG_KNOWN_NH at flowi6_flagsMartin KaFai Lau2-4/+10
2015-05-25ipv6: Add rt6_get_cookie() functionMartin KaFai Lau1-1/+1
2015-05-25ipv6: Remove external dependency on rt6i_gateway and RTF_ANYCASTMartin KaFai Lau2-3/+3
2015-05-25ipv6: Remove external dependency on rt6i_dst and rt6i_srcMartin KaFai Lau1-2/+2
2015-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller6-23/+58
2015-05-20netfilter: nfnetlink_{log,queue}: Register pernet in first placeFrancesco Ruggeri2-18/+19
2015-05-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller24-231/+307
2015-05-17netfilter: Use correct return for seq_show functionsJoe Perches2-13/+7
2015-05-15netfilter: nf_tables: fix bogus warning in nft_data_uninit()Mirek Kratochvil1-2/+2
2015-05-15conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transitionJesper Dangaard Brouer1-3/+32
2015-05-15netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=mFlorian Westphal1-0/+2
2015-05-15netfilter: x_tables: add context to know if extension runs from nft_compatPablo Neira Ayuso2-0/+8
2015-05-14netfilter: xt_MARK: Add ARP supportZhang Chunyu1-0/+1
2015-05-14netfilter: ipset: deinline ip_set_put_extensions()Denys Vlasenko1-0/+25
2015-05-14netfilter: add netfilter ingress hook after handle_ing() under unique static keyPablo Neira2-1/+37
2015-05-14netfilter: add hook list to nf_hook_statePablo Neira1-4/+2
2015-05-13netfilter: ipset: Use better include files in xt_set.cJozsef Kadlecsik1-1/+2
2015-05-13netfilter: ipset: Improve preprocessor macros checksSergey Popovich3-7/+18