summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2016-09-13netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensionsGao Feng-4/+5
2016-09-12netfilter: nf_nat: handle NF_DROP from nfnetlink_parse_nat_setup()Pablo Neira Ayuso-1/+1
2016-09-05netfilter: nf_tables_trace: fix endiness when dump chain policyLiping Zhang-1/+1
2016-08-30netfilter: nf_tables_netdev: remove redundant ip_hdr assignmentLiping Zhang-1/+0
2016-08-25netfilter: nft_meta: improve the validity check of pkttype set exprLiping Zhang-4/+13
2016-08-25netfilter: cttimeout: unlink timeout objs in the unconfirmed ct listsLiping Zhang-1/+10
2016-08-25netfilter: cttimeout: put back l4proto when replacing timeout policyLiping Zhang-18/+15
2016-08-25netfilter: nfnetlink: use list_for_each_entry_safe to delete all objectsLiping Zhang-5/+6
2016-08-25netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang-1/+22
2016-08-18netfilter: cttimeout: fix use after free error when delete netnsLiping Zhang-6/+10
2016-08-18netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroyLiping Zhang-4/+4
2016-08-18netfilter: tproxy: properly refcount tcp listenersEric Dumazet-0/+4
2016-08-18netfilter: nfnetlink_acct: report overquota to the right netnsLiping Zhang-5/+6
2016-08-17netfilter: nfnetlink_log: add "nf-logger-3-1" module alias nameLiping Zhang-0/+1
2016-08-17netfilter: conntrack: do not dump other netns's conntrack entries via procLiping Zhang-0/+4
2016-08-10netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana-2/+9
2016-08-09netfilter: ctnetlink: reject new conntrack request with different l4protoLiping Zhang-0/+2
2016-08-09netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang-4/+2
2016-08-09netfilter: nfnetlink_queue: fix memory leak when attach expectation successfullyLiping Zhang-6/+2
2016-08-09netfilter: nf_ct_expect: remove the redundant slash when policy name is emptyLiping Zhang-1/+1
2016-08-08netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeqChristophe Leroy-2/+2
2016-08-08netfilter: nft_rbtree: ignore inactive matching element with no descendantsPablo Neira Ayuso-4/+6
2016-08-08netfilter: nf_ct_h323: do not re-activate already expired timerLiping Zhang-1/+2
2016-07-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds-808/+1009
2016-07-25Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds-1/+22
2016-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-488/+589
2016-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-9/+17
2016-07-23netfilter: nft_compat: fix crash when related match/target module is removedLiping Zhang-23/+20
2016-07-23netfilter: nft_compat: put back match/target module if init failLiping Zhang-8/+24
2016-07-23netfilter: h323: Use mod_timer instead of set_expect_timeoutGao Feng-14/+1
2016-07-22netfilter: connlabels: move set helper to xt_connlabelFlorian Westphal-30/+16
2016-07-22netfilter: conntrack: support a fixed size of 128 distinct labelsFlorian Westphal-26/+12
2016-07-21netfilter: nf_tables: allow to filter out rules by table and chainPablo Neira Ayuso-0/+38
2016-07-21netfilter: nft_log: fix snaplen does not truncate packetsLiping Zhang-1/+2
2016-07-21netfilter: nft_log: check the validity of log levelLiping Zhang-0/+5
2016-07-21netfilter: nft_log: fix possible memory leak if log expr init failLiping Zhang-8/+18
2016-07-21netfilter: Add helper array register/unregister functionsGao Feng-181/+150
2016-07-19netfilter: nft_ct: fix unpaired nf_connlabels_get/put callLiping Zhang-6/+19
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal-0/+50
2016-07-12netfilter: conntrack: skip clash resolution if nat is in placePablo Neira Ayuso-0/+1
2016-07-12netfilter: conntrack: protect early_drop by rcu read lockLiping Zhang-0/+3
2016-07-11netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931Toby DiPasquale-1/+2
2016-07-11Merge tag 'ipvs-for-v4.8' of https://git.kernel.org/pub/scm/linux/kernel/git/...Pablo Neira Ayuso-2/+23
2016-07-11netfilter: nf_tables: get rid of possible_net_t from set and basechainPablo Neira Ayuso-29/+29
2016-07-11netfilter: nft_ct: make byte/packet expr more friendlyLiping Zhang-0/+3
2016-07-11netfilter: physdev: physdev-is-out should not work with OUTPUT chainHangbin Liu-4/+4
2016-07-11netfilter: nat: convert nat bysrc hash to rhashtableFlorian Westphal-58/+68
2016-07-11Merge tag 'ipvs-fixes2-for-v4.7' of https://git.kernel.org/pub/scm/linux/kern...Pablo Neira Ayuso-2/+4
2016-07-11netfilter: move nat hlist_head to nf_connFlorian Westphal-39/+9
2016-07-11netfilter: conntrack: simplify early_dropFlorian Westphal-48/+47