summaryrefslogtreecommitdiffstats
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorLines
2016-09-13netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensionsGao Feng-0/+14
2016-08-25netfilter: nft_meta: improve the validity check of pkttype set exprLiping Zhang-0/+4
2016-08-25netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang-0/+4
2016-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-31/+40
2016-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-0/+8
2016-07-22netfilter: connlabels: move set helper to xt_connlabelFlorian Westphal-2/+0
2016-07-22netfilter: conntrack: support a fixed size of 128 distinct labelsFlorian Westphal-12/+4
2016-07-21netfilter: Add helper array register/unregister functionsGao Feng-0/+15
2016-07-11netfilter: nf_tables: get rid of possible_net_t from set and basechainPablo Neira Ayuso-10/+11
2016-07-11netfilter: constify arg to is_dying/confirmedFlorian Westphal-2/+2
2016-07-11netfilter: nat: convert nat bysrc hash to rhashtableFlorian Westphal-1/+3
2016-07-11netfilter: move nat hlist_head to nf_connFlorian Westphal-5/+3
2016-07-11netfilter: conntrack: simplify early_dropFlorian Westphal-0/+1
2016-07-11netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang-0/+2
2016-07-08netfilter: nft_ct: fix expiration getterFlorian Westphal-0/+8
2016-07-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-33/+70
2016-06-24netfilter: nf_tables: get rid of NFT_BASECHAIN_DISABLEDPablo Neira Ayuso-1/+0
2016-06-24netfilter: conntrack: allow increasing bucket size via sysctl tooFlorian Westphal-0/+1
2016-06-24netfilter: nf_tables: add generation mask to setsPablo Neira Ayuso-3/+5
2016-06-24netfilter: nf_tables: add generation mask to chainsPablo Neira Ayuso-2/+2
2016-06-24netfilter: nf_tables: add generation mask to tablesPablo Neira Ayuso-1/+5
2016-06-24netfilter: nf_tables: add generic macros to check for generation maskPablo Neira Ayuso-0/+24
2016-06-24netfilter: xt_NFLOG: nflog-range does not truncate packetsVishwanath Pai-0/+7
2016-06-23netfilter: move zone info into struct nf_connFlorian Westphal-26/+14
2016-06-23netfilter: make comparision helpers stub functions in ZONES=n caseFlorian Westphal-0/+12
2016-06-15netfilter: nf_tables: reject loops from set element jump to chainPablo Neira Ayuso-0/+1
2016-06-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller-2/+2
2016-05-25netfilter: nf_queue: Make the queue_handler pernetEric W. Biederman-2/+2
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal-0/+1
2016-05-05netfilter: nf_tables: allow set names up to 32 bytesPablo Neira Ayuso-1/+1
2016-05-05netfilter: conntrack: introduce clash resolution on insertion racePablo Neira Ayuso-0/+3
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal-0/+1
2016-04-25netfilter: conntrack: use get_random_once for conntrack hash seedFlorian Westphal-2/+0
2016-04-18netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used'Florian Westphal-2/+2
2016-04-18netfilter: connlabels: move helpers to xt_connlabelFlorian Westphal-1/+0
2016-04-12netfilter: conntrack: move expectation event helper to ecache.cFlorian Westphal-39/+3
2016-04-12netfilter: conntrack: de-inline nf_conntrack_eventmask_reportFlorian Westphal-54/+12
2016-03-02netfilter: nft_masq: support port rangePablo Neira Ayuso-1/+3
2016-01-20netfilter: nf_conntrack: use safer way to lock all bucketsSasha Levin-5/+3
2016-01-08netfilter: nf_tables: Add new attributes into nft_set to store user data.Carlos Falgueras GarcĂ­a-0/+4
2016-01-03netfilter: nf_tables: add packet duplication to the netdev familyPablo Neira Ayuso-0/+6
2015-12-28netfilter: nf_tables: destroy basechain and rules on netdevice removalPablo Neira Ayuso-4/+1
2015-12-28netfilter: nf_tables: release objects on netns destructionPablo Neira Ayuso-1/+1
2015-12-14netfilter: cttimeout: add netns supportPablo Neira-1/+1
2015-12-09netfilter: nf_tables: wrap tracing with a static keyFlorian Westphal-0/+4
2015-12-09netfilter: nf_tables: extend tracing infrastructureFlorian Westphal-0/+32
2015-11-25netfilter: nft_payload: add packet mangling supportPatrick McHardy-0/+9
2015-11-25netfilter: nf_tables: remove unused struct membersFlorian Westphal-2/+0
2015-11-23netfilter: ipv6: avoid nf_iterate recursionFlorian Westphal-1/+1
2015-11-23netfilter: ipv6: nf_defrag: avoid/free clone operationsFlorian Westphal-1/+0