summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2017-05-24netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang-1/+6
2017-05-23netfilter: nat: use atomic bit op to clear the _SRC_NAT_DONE_BITLiping Zhang-1/+1
2017-05-23netfilter: nft_set_rbtree: handle element re-addition after deletionPablo Neira Ayuso-11/+11
2017-05-23netfilter: conntrack: fix false CRC32c mismatch using paged skbDavide Caratti-3/+6
2017-05-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller-72/+227
2017-05-18netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPATWillem de Bruijn-8/+13
2017-05-15netfilter: nf_tables: revisit chain/object refcounting from elementsPablo Neira Ayuso-17/+80
2017-05-15netfilter: nf_tables: missing sanitization in data from userspacePablo Neira Ayuso-7/+24
2017-05-15netfilter: nf_tables: can't assume lock is acquired when dumping set elemsLiping Zhang-23/+57
2017-05-15netfilter: synproxy: fix conntrackd interactionEric Leblond-0/+4
2017-05-15netfilter: xtables: zero padding in data_to_userWillem de Bruijn-3/+6
2017-05-15Merge tag 'ipvs-fixes-for-v4.12' of http://git.kernel.org/pub/scm/linux/kerne...Pablo Neira Ayuso-5/+14
2017-05-15netfilter: nfnl_cthelper: reject del request if helper obj is in useLiping Zhang-6/+17
2017-05-15netfilter: introduce nf_conntrack_helper_put helper functionLiping Zhang-5/+11
2017-05-15netfilter: don't setup nat info for confirmed ctLiping Zhang-0/+4
2017-05-15netfilter: ctnetlink: Make some parameters integer to avoid enum mismatchMatthias Kaehlcke-4/+3
2017-05-10Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds-4/+4
2017-05-08mm, vmalloc: use __GFP_HIGHMEM implicitlyMichal Hocko-2/+1
2017-05-08treewide: use kv[mz]alloc* rather than opencoded variantsMichal Hocko-21/+5
2017-05-08ipvs: SNAT packet replies only for NATed connectionsJulian Anastasov-5/+14
2017-05-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds-58/+113
2017-05-03Merge branch 'stable-4.12' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds-98/+28
2017-05-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller-57/+112
2017-05-03netfilter: conntrack: Force inlining of build check to prevent build failureGeert Uytterhoeven-1/+1
2017-05-03netfilter: nf_tables: check if same extensions are set when adding elementsPablo Neira Ayuso-0/+5
2017-05-02audit: normalize NETFILTER_PKTRichard Guy Briggs-97/+27
2017-05-02netfilter: use consistent ipv4 network offset in xt_AUDITRichard Guy Briggs-1/+1
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller-506/+533
2017-05-01netfilter: nf_ct_ext: invoke destroy even when ext is not attachedLiping Zhang-6/+2
2017-05-01Merge tag 'ipvs3-for-v4.12' of http://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso-23/+1
2017-05-01netfilter: nf_queue: only call synchronize_net twice if nf_queue is activeFlorian Westphal-22/+26
2017-05-01netfilter: nf_log: don't call synchronize_rcu in nf_log_unsetFlorian Westphal-2/+1
2017-05-01netfilter: batch synchronize_net calls during hook unregisterFlorian Westphal-6/+40
2017-04-28Merge tag 'ipvs-fixes-for-v4.11' of http://git.kernel.org/pub/scm/linux/kerne...Pablo Neira Ayuso-5/+17
2017-04-28netfilter: x_tables: unlock on error in xt_find_table_lock()Dan Carpenter-1/+3
2017-04-28ipvs: explicitly forbid ipv6 service/dest creation if ipv6 mod is disabledPaolo Abeni-5/+17
2017-04-28ipvs: change comparison on sync_refresh_periodAaron Conole-1/+1
2017-04-28ipvs: remove unused function ip_vs_set_state_timeoutAaron Conole-22/+0
2017-04-26netfilter: don't attach a nat extension by defaultFlorian Westphal-6/+0
2017-04-26netfilter: pptp: attach nat extension when neededFlorian Westphal-2/+10
2017-04-26netfilter: conntrack: handle initial extension alloc via kreallocFlorian Westphal-36/+15
2017-04-26netfilter: conntrack: mark extension structs as constFlorian Westphal-9/+9
2017-04-26netfilter: conntrack: remove prealloc supportFlorian Westphal-46/+4
2017-04-26ipvs: convert to use pernet nf_hook apiFlorian Westphal-10/+9
2017-04-25netfilter: nft_dynset: continue to next expr if _OP_ADD succeededLiping Zhang-3/+2
2017-04-24netfilter: xt_socket: Fix broken IPv6 handlingPeter Tirsek-1/+1
2017-04-24netfilter: ctnetlink: acquire ct->lock before operating nf_ct_seqadjLiping Zhang-6/+15
2017-04-24netfilter: ctnetlink: make it safer when updating ct->statusLiping Zhang-9/+24
2017-04-24netfilter: ctnetlink: fix deadlock due to acquire _expect_lock twiceLiping Zhang-12/+12
2017-04-24netfilter: ctnetlink: drop the incorrect cthelper module requestLiping Zhang-16/+1