summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2016-07-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller26-488/+589
2016-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller5-9/+17
2016-07-23netfilter: nft_compat: fix crash when related match/target module is removedLiping Zhang1-23/+20
2016-07-23netfilter: nft_compat: put back match/target module if init failLiping Zhang1-8/+24
2016-07-23netfilter: h323: Use mod_timer instead of set_expect_timeoutGao Feng1-14/+1
2016-07-22netfilter: connlabels: move set helper to xt_connlabelFlorian Westphal2-30/+16
2016-07-22netfilter: conntrack: support a fixed size of 128 distinct labelsFlorian Westphal4-26/+12
2016-07-21netfilter: nf_tables: allow to filter out rules by table and chainPablo Neira Ayuso1-0/+38
2016-07-21netfilter: nft_log: fix snaplen does not truncate packetsLiping Zhang1-1/+2
2016-07-21netfilter: nft_log: check the validity of log levelLiping Zhang1-0/+5
2016-07-21netfilter: nft_log: fix possible memory leak if log expr init failLiping Zhang1-8/+18
2016-07-21netfilter: Add helper array register/unregister functionsGao Feng6-181/+150
2016-07-19netfilter: nft_ct: fix unpaired nf_connlabels_get/put callLiping Zhang1-6/+19
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal1-0/+50
2016-07-12netfilter: conntrack: skip clash resolution if nat is in placePablo Neira Ayuso1-0/+1
2016-07-12netfilter: conntrack: protect early_drop by rcu read lockLiping Zhang1-0/+3
2016-07-11netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931Toby DiPasquale1-1/+2
2016-07-11Merge tag 'ipvs-for-v4.8' of https://git.kernel.org/pub/scm/linux/kernel/git/...Pablo Neira Ayuso1-2/+23
2016-07-11netfilter: nf_tables: get rid of possible_net_t from set and basechainPablo Neira Ayuso4-29/+29
2016-07-11netfilter: nft_ct: make byte/packet expr more friendlyLiping Zhang1-0/+3
2016-07-11netfilter: physdev: physdev-is-out should not work with OUTPUT chainHangbin Liu1-4/+4
2016-07-11netfilter: nat: convert nat bysrc hash to rhashtableFlorian Westphal1-58/+68
2016-07-11Merge tag 'ipvs-fixes2-for-v4.7' of https://git.kernel.org/pub/scm/linux/kern...Pablo Neira Ayuso1-2/+4
2016-07-11netfilter: move nat hlist_head to nf_connFlorian Westphal2-39/+9
2016-07-11netfilter: conntrack: simplify early_dropFlorian Westphal1-48/+47
2016-07-11netfilter: nf_ct_helper: unlink helper again when hash resize happenLiping Zhang1-6/+13
2016-07-11netfilter: cttimeout: unlink timeout obj again when hash resize happenLiping Zhang1-6/+14
2016-07-11netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang2-5/+26
2016-07-08netfilter: nft_ct: fix expiration getterFlorian Westphal1-5/+1
2016-07-07ipvs: count pre-established TCP states as activeMichal Kubecek1-2/+23
2016-07-07ipvs: fix bind to link-local mcast IPv6 address in backupQuentin Armitage1-2/+4
2016-07-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller17-321/+428
2016-07-05netfilter: nf_log: fix error on write NONE to logger choice sysctlPavel Tikhomirov1-5/+6
2016-07-05net: simplify and make pkt_type_ok() available for other usersJamal Hadi Salim1-8/+1
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches1-5/+2
2016-07-01netfilter: Remove references to obsolete CONFIG_IP_ROUTE_FWMARKMoritz Sichert1-6/+4
2016-07-01netfilter: conntrack: avoid integer overflow when resizingFlorian Westphal1-0/+7
2016-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller5-18/+16
2016-06-24netfilter: nf_tables: add support for inverted logic in nft_lookupArturo Borrero1-5/+32
2016-06-24netfilter: nf_tables: get rid of NFT_BASECHAIN_DISABLEDPablo Neira Ayuso1-37/+25
2016-06-24netfilter: conntrack: allow increasing bucket size via sysctl tooFlorian Westphal2-18/+59
2016-06-24netfilter: nft_hash: support deletion of inactive elementsPablo Neira Ayuso1-2/+4
2016-06-24netfilter: nft_rbtree: check for next generation when deactivating elementsPablo Neira Ayuso1-1/+1
2016-06-24netfilter: nf_tables: add generation mask to setsPablo Neira Ayuso3-32/+49
2016-06-24netfilter: nf_tables: add generation mask to chainsPablo Neira Ayuso1-31/+58
2016-06-24netfilter: nf_tables: add generation mask to tablesPablo Neira Ayuso1-44/+57
2016-06-24netfilter: nf_tables: add generic macros to check for generation maskPablo Neira Ayuso1-38/+8
2016-06-24netfilter: xt_NFLOG: nflog-range does not truncate packetsVishwanath Pai2-3/+9
2016-06-23netfilter: nft_meta: set skb->nf_trace appropriatelyLiping Zhang1-1/+1
2016-06-23netfilter: nf_tables: fix memory leak if expr init failsLiping Zhang1-1/+3