summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2015-01-30netfilter: nf_tables: fix leaks in error path of nf_tables_newchain()Pablo Neira Ayuso-2/+6
2015-01-30ipvs: rerouting to local clients is not needed anymoreJulian Anastasov-11/+22
2015-01-26netfilter: nf_tables: disable preemption when restoring chain countersPablo Neira Ayuso-0/+2
2015-01-19netfilter: nf_tables: validate hooks in NAT expressionsPablo Neira Ayuso-27/+82
2015-01-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller-27/+30
2015-01-06netfilter: nf_tables: fix flush ruleset chain dependenciesPablo Neira Ayuso-5/+9
2015-01-06netfilter: nfnetlink: relax strict multicast group check from netlink_bindPablo Neira Ayuso-1/+1
2015-01-06netfilter: nfnetlink: validate nfnetlink header from batchPablo Neira Ayuso-1/+2
2015-01-06netfilter: conntrack: fix race between confirmation and flushPablo Neira Ayuso-11/+9
2014-12-27netlink/genetlink: pass network namespace to bind/unbindJohannes Berg-1/+1
2014-12-23netfilter: nf_tables: fix port natting in little endian archsleroy christophe-4/+4
2014-12-18Merge tag 'ipvs2-for-v3.19' of https://git.kernel.org/pub/scm/linux/kernel/gi...Pablo Neira Ayuso-5/+5
2014-12-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds-225/+502
2014-12-10Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds-132/+133
2014-12-10ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter-5/+5
2014-12-09dst: no need to take reference on DST_NOCACHE dstsHannes Frederic Sowa-2/+2
2014-12-08Merge branch 'iov_iter' into for-nextAl Viro-90/+184
2014-12-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-85/+310
2014-12-03netfilter: ipset: Explicitly add padding elements to hash:net, net and hash:n...Jozsef Kadlecsik-0/+4
2014-12-03netfilter: ipset: Allocate the proper size of memory when /0 networks are sup...Jozsef Kadlecsik-2/+1
2014-12-03netfilter: ipset: Simplify cidr handling for hash:*net* typesJozsef Kadlecsik-28/+28
2014-12-03netfilter: ipset: Indicate when /0 networks are supportedJozsef Kadlecsik-1/+2
2014-12-03netfilter: ipset: Alignment problem between 64bit kernel 32bit userspaceJozsef Kadlecsik-3/+70
2014-12-03netfilter: ipset: Support updating extensions when the set is fullJozsef Kadlecsik-23/+17
2014-11-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-8/+6
2014-11-27netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one modulePablo Neira Ayuso-4/+137
2014-11-27netfilter: conntrack: avoid zeroing timerFlorian Westphal-7/+4
2014-11-27netfilter: xt_recent: relax ip_pkt_list_tot restrictionsFlorian Westphal-17/+47
2014-11-25Revert "netfilter: conntrack: fix race in __nf_conntrack_confirm against get_...Pablo Neira-8/+6
2014-11-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-139/+187
2014-11-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-57/+41
2014-11-20netfilter: nfnetlink_log: Make use of pr_fmt where applicableMarcelo Leitner-3/+6
2014-11-20netfilter: Deletion of unnecessary checks before two function callsMarkus Elfring-10/+5
2014-11-17netfilter: nf_conntrack_h323: lookup route from proper net namespaceVasily Averin-6/+8
2014-11-17netfilter: xt_connlimit: honor conntrack zone if availableFlorian Westphal-11/+14
2014-11-17netfilter: nfnetlink: fix insufficient validation in nfnetlink_bindPablo Neira Ayuso-1/+11
2014-11-14netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpsebill bonaparte-6/+8
2014-11-13rhashtable: Drop gfp_flags arg in insert/remove functionsThomas Graf-2/+2
2014-11-13rhashtable: Add parent argument to mutex_is_heldHerbert Xu-1/+1
2014-11-13netfilter: Move mutex_is_held under PROVE_LOCKINGHerbert Xu-0/+4
2014-11-13netfilter: nfnetlink_log: remove unnecessary error messagesPablo Neira Ayuso-7/+2
2014-11-13netfilter: fix various sparse warningsFlorian Westphal-2/+5
2014-11-12netfilter: nf_tables: restore synchronous object release from commit/abortPablo Neira Ayuso-16/+8
2014-11-12netfilter: nft_compat: use the match->table to validate dependenciesPablo Neira Ayuso-2/+2
2014-11-12netfilter: nft_compat: relax chain type validationPablo Neira Ayuso-30/+2
2014-11-12netfilter: nft_compat: use current net namespacePablo Neira Ayuso-2/+2
2014-11-12netfilter: nft_redir: fix sparse warningsPablo Neira Ayuso-5/+6
2014-11-12netfilter: fix unmet dependencies in NETFILTER_XT_TARGET_REDIRECTPablo Neira Ayuso-2/+2
2014-11-12ipvs: Keep skb->sk when allocating headroom on tunnel xmitCalvin Owens-0/+2
2014-11-11netfilter: ipset: small potential read beyond the end of bufferDan Carpenter-0/+6