summaryrefslogtreecommitdiffstats
path: root/net/netfilter/xt_socket.c
AgeCommit message (Expand)AuthorLines
2023-07-29net: annotate data-races around sk->sk_markEric Dumazet-2/+2
2022-02-13netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependencyPablo Neira Ayuso-0/+2
2022-02-09netfilter: xt_socket: fix a typo in socket_mt_destroy()Eric Dumazet-1/+1
2021-04-26netfilter: disable defrag once its no longer neededFlorian Westphal-0/+14
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner-5/+1
2018-09-28netfilter: xt_socket: check sk before checking for netns.Flavio Leitner-2/+2
2018-06-28netfilter: check if the socket netns is correct.Flavio Leitner-0/+8
2018-06-03netfilter: Decrease code duplication regarding transparent socket optionMáté Eckl-2/+2
2018-02-14netfilter: x_tables: use pr ratelimiting in all remaining spotsFlorian Westphal-4/+6
2017-09-26netfilter: xt_socket: Restore mark from full sockets onlySubash Abhinov Kasiviswanathan-2/+2
2017-04-24netfilter: xt_socket: Fix broken IPv6 handlingPeter Tirsek-1/+1
2016-12-06netfilter: defrag: only register defrag functionality if neededFlorian Westphal-5/+28
2016-11-03netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso-2/+2
2016-11-01netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.cPablo Neira Ayuso-295/+10
2016-04-04tcp/dccp: do not touch listener sk_refcnt under synfloodEric Dumazet-3/+3
2016-02-11inet: refactor inet[6]_lookup functions to take skbCraig Gallek-7/+21
2015-09-18netfilter: x_tables: Use par->net instead of computing from the passed net de...Eric W. Biederman-6/+8
2015-06-18netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flagHarout Hedeshian-6/+53
2015-04-08netfilter: x_tables: don't extract flow keys on early demuxed sks in socket m...Daniel Borkmann-45/+50
2015-03-17netfilter: xt_socket: prepare for TCP_NEW_SYN_RECV supportEric Dumazet-12/+22
2015-02-16netfilter: xt_socket: fix a stack corruption bugEric Dumazet-9/+12
2013-10-17netfilter: xt_socket: use sock_gen_put()Eric Dumazet-11/+2
2013-10-09ipv6: make lookups simpler and fasterEric Dumazet-1/+1
2013-08-20Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller-5/+61
2013-07-31netfilter: tproxy: remove nf_tproxy_core.hFlorian Westphal-5/+61
2013-07-15netfilter: xt_socket: fix broken v0 supportEric Dumazet-3/+7
2013-06-20netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flagEric Dumazet-8/+62
2013-05-23netfilter: xt_socket: use IP early demuxEric Dumazet-10/+16
2012-09-03netfilter: xt_socket: fix compilation warnings with gcc 4.7Pablo Neira Ayuso-6/+6
2012-05-09netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()Hans Schillstrom-2/+2
2011-12-16net:netfilter: use IS_ENABLEDIgor Maravić-2/+2
2011-12-03ipv6: Add fragment reporting to ipv6_skip_exthdr().Jesse Gross-1/+3
2011-06-06netfilter: add more values to enum ip_conntrack_infoEric Dumazet-2/+2
2011-02-17netfilter: tproxy: do not assign timewait sockets to skb->skFlorian Westphal-2/+11
2010-10-28netfilter: xt_socket: Make tproto signed in socket_mt6_v1().David S. Miller-4/+3
2010-10-25netfilter: fix module dependency issues with IPv6 defragmentation, ip6tables ...KOVACS Krisztian-4/+8
2010-10-21tproxy: added IPv6 support to the socket matchBalazs Scheidler-11/+154
2010-10-21tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the...Balazs Scheidler-1/+1
2010-06-08netfilter: nf_conntrack: IPS_UNTRACKED bitEric Dumazet-1/+1
2010-05-11netfilter: xtables: deconstify struct xt_action_param for matchesJan Engelhardt-3/+3
2010-05-11netfilter: xtables: substitute temporary defines by final nameJan Engelhardt-3/+3
2010-03-25netfilter: xt extensions: use pr_<level> (2)Jan Engelhardt-3/+2
2009-10-29netfilter: xt_socket: make module available for INPUT chainJan Engelhardt-2/+4
2009-10-18inet: rename some inet_sock fieldsEric Dumazet-1/+1
2009-06-09netfilter: xt_socket: added new revision of the 'socket' match supporting flagsLaszlo Attila Toth-11/+52
2008-12-07tproxy: fixe a possible read from an invalid location in the socket matchBalazs Scheidler-1/+1
2008-10-08netfilter: xtables: move extension arguments into compound structure (1/6)Jan Engelhardt-9/+2
2008-10-08netfilter: iptables socket matchKOVACS Krisztian-0/+192
generated by cgit v1.2.3 (git 2.46.0) at 2026-03-01 22:57:48 +0000