summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)Author
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-07-11netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches
2016-07-01netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso
2016-06-24netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCPLiping Zhang
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal
2016-05-05netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal
2016-05-05netfilter: conntrack: small refactoring of conntrack seq_printfFlorian Westphal
2016-04-29netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso
2016-04-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2016-04-14netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-04-14netfilter: x_tables: remove obsolete checkFlorian Westphal
2016-04-14netfilter: x_tables: remove obsolete overflow check for compat case tooFlorian Westphal
2016-04-14netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-04-14netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-04-14netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal
2016-04-14netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal
2016-04-14netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-04-14netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-04-14netfilter: x_tables: kill check_entry helperFlorian Westphal
2016-04-14netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-04-14netfilter: x_tables: validate targets of jumpsFlorian Westphal
2016-04-14netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal
2016-04-07netfilter: arp_tables: register table in initnsFlorian Westphal
2016-03-28netfilter: ipv4: fix NULL dereferenceLiping Zhang
2016-03-28netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_EN...Pablo Neira Ayuso
2016-03-28netfilter: x_tables: fix unconditional helperFlorian Westphal
2016-03-28netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal
2016-03-28netfilter: x_tables: validate e->target_offset earlyFlorian Westphal
2016-03-14Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2016-03-14netfilter: Allow calling into nat helper without skb_dst.Jarno Rajahalme
2016-03-13ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller
2016-03-02netfilter: nft_masq: support port rangePablo Neira Ayuso
2016-03-02netfilter: xtables: don't hook tables by defaultFlorian Westphal
2016-03-02netfilter: xtables: prepare for on-demand hook registerFlorian Westphal
2016-03-02netfilter: nf_defrag_ipv4: Drop redundant ip_send_check()Joe Stringer
2016-02-16ipv4: Namespaceify ip_default_ttl sysctl knobNikolay Borisov
2016-01-28inet: frag: Always orphan skbs inside ip_defrag()Joe Stringer
2015-12-28netfilter: nf_tables: release objects on netns destructionPablo Neira Ayuso
2015-12-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2015-12-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2015-12-15net: Eliminate NETIF_F_GEN_CSUM and NETIF_F_V[46]_CSUMTom Herbert
2015-12-10netfilter: nf_dup: add missing dependencies with NF_CONNTRACKPablo Neira Ayuso
2015-11-23netfilter: remove duplicate includestephen hemminger
2015-11-18net ipv4: use preferred log methodsBastian Stender
2015-11-09netfilter: Fix removal of GRE expectation entries created by PPTPAnthony Lineham
2015-11-05ipv4: use sk_fullsock() in ipv4_conntrack_defrag()Eric Dumazet