summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2015-07-02netfilter: nfnetlink: keep going batch handling on missing modulesPablo Neira Ayuso-13/+25
2015-07-02netfilter: nf_queue: Don't recompute the hook_list headEric W. Biederman-1/+1
2015-06-23netfilter: nf_qeueue: Drop queue entries on nf_unregister_hookEric W. Biederman-1/+42
2015-06-23netfilter: nftables: Do not run chains in the wrong network namespaceEric W. Biederman-1/+6
2015-06-18netfilter: use forward declaration instead of including linux/proc_fs.hPablo Neira Ayuso-0/+1
2015-06-18netfilter: Kill unused copies of RCV_SKB_FAILEric W. Biederman-4/+0
2015-06-18netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flagHarout Hedeshian-6/+53
2015-06-18netfilter: nfnetlink_queue: add security context informationRoman Kubiak-1/+34
2015-06-15netfilter: nf_tables_netdev: unregister hooks on net_device removalPablo Neira Ayuso-4/+87
2015-06-15netfilter: nf_tables: add nft_register_basechain() and nft_unregister_basecha...Pablo Neira Ayuso-15/+37
2015-06-15netfilter: nf_tables: attach net_device to basechainPablo Neira Ayuso-37/+42
2015-06-15netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference.Eric Dumazet-20/+12
2015-06-15Merge branch 'master' of git://blackhole.kfki.hu/nf-nextPablo Neira Ayuso-1270/+1261
2015-06-15netfilter: Kconfig: get rid of parens around depends onPablo Neira Ayuso-9/+9
2015-06-14netfilter: ipset: Fix coding styles reported by checkpatch.plJozsef Kadlecsik-289/+322
2015-06-14netfilter: ipset: Introduce RCU locking in list typeJozsef Kadlecsik-209/+189
2015-06-14netfilter: ipset: Introduce RCU locking in hash:* typesJozsef Kadlecsik-236/+364
2015-06-14netfilter: ipset: Introduce RCU locking in bitmap:* typesJozsef Kadlecsik-14/+38
2015-06-14netfilter: ipset: Prepare the ipset core to use RCU at set levelJozsef Kadlecsik-22/+22
2015-06-14netfilter:ipset Remove rbtree from hash:net,ifaceJozsef Kadlecsik-143/+20
2015-06-14netfilter: ipset: Make sure listing doesn't grab a set which is just being de...Jozsef Kadlecsik-15/+34
2015-06-14netfilter: ipset: Fix parallel resizing and listing of the same setJozsef Kadlecsik-15/+58
2015-06-14netfilter: ipset: Fix cidr handling for hash:*net* typesJozsef Kadlecsik-34/+42
2015-06-14netfilter: ipset: Check CIDR value only when attribute is givenSergey Popovich-49/+41
2015-06-14netfilter: ipset: Make sure we always return line number on batchSergey Popovich-75/+75
2015-06-14netfilter: ipset: Permit CIDR equal to the host address CIDR in IPv6Sergey Popovich-15/+43
2015-06-14netfilter: ipset: Check extensions attributes before getting extensions.Sergey Popovich-170/+29
2015-06-14netfilter: ipset: Use SET_WITH_*() helpers to test set extensionsSergey Popovich-7/+7
2015-06-12netfilter: xtables: avoid percpu ruleset duplicationFlorian Westphal-15/+8
2015-06-12netfilter: conntrack: warn the user if there is a better helper to useMarcelo Ricardo Leitner-1/+7
2015-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-5/+231
2015-05-26netfilter: nf_tables: add netdev table to filter from ingressPablo Neira Ayuso-0/+189
2015-05-26netfilter: nf_tables: allow to bind table to net_devicePablo Neira Ayuso-5/+41
2015-05-26netfilter: default CONFIG_NETFILTER_INGRESS to yPablo Neira Ayuso-0/+1
2015-05-25ipv6: Set FLOWI_FLAG_KNOWN_NH at flowi6_flagsMartin KaFai Lau-4/+10
2015-05-25ipv6: Add rt6_get_cookie() functionMartin KaFai Lau-1/+1
2015-05-25ipv6: Remove external dependency on rt6i_gateway and RTF_ANYCASTMartin KaFai Lau-3/+3
2015-05-25ipv6: Remove external dependency on rt6i_dst and rt6i_srcMartin KaFai Lau-2/+2
2015-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-23/+58
2015-05-20netfilter: nfnetlink_{log,queue}: Register pernet in first placeFrancesco Ruggeri-18/+19
2015-05-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-231/+307
2015-05-17netfilter: Use correct return for seq_show functionsJoe Perches-13/+7
2015-05-15netfilter: nf_tables: fix bogus warning in nft_data_uninit()Mirek Kratochvil-2/+2
2015-05-15conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transitionJesper Dangaard Brouer-3/+32
2015-05-15netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=mFlorian Westphal-0/+2
2015-05-15netfilter: x_tables: add context to know if extension runs from nft_compatPablo Neira Ayuso-0/+8
2015-05-14netfilter: xt_MARK: Add ARP supportZhang Chunyu-0/+1
2015-05-14netfilter: ipset: deinline ip_set_put_extensions()Denys Vlasenko-0/+25
2015-05-14netfilter: add netfilter ingress hook after handle_ing() under unique static keyPablo Neira-1/+37
2015-05-14netfilter: add hook list to nf_hook_statePablo Neira-4/+2