aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter/ip_tables.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2016-04-14netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal1-43/+5
2016-04-14netfilter: x_tables: remove obsolete checkFlorian Westphal1-7/+0
2016-04-14netfilter: x_tables: remove obsolete overflow check for compat case tooFlorian Westphal1-2/+0
2016-04-14netfilter: x_tables: do compat validation via translate_tableFlorian Westphal1-126/+29
2016-04-14netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal1-17/+9
2016-04-14netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal1-35/+24
2016-04-14netfilter: x_tables: check for bogus target offsetFlorian Westphal1-2/+3
2016-04-14netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal1-1/+2
2016-04-14netfilter: x_tables: kill check_entry helperFlorian Westphal1-12/+8
2016-04-14netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal1-11/+1
2016-04-14netfilter: x_tables: validate targets of jumpsFlorian Westphal1-0/+16
2016-04-14netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal1-0/+4
2016-03-28netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIESPablo Neira Ayuso1-0/+2
2016-03-28netfilter: x_tables: fix unconditional helperFlorian Westphal1-12/+11
2016-03-28netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal1-2/+4
2016-03-28netfilter: x_tables: validate e->target_offset earlyFlorian Westphal1-9/+8
2016-03-02netfilter: xtables: don't hook tables by defaultFlorian Westphal1-14/+28
2016-03-02netfilter: xtables: prepare for on-demand hook registerFlorian Westphal1-11/+10
2015-10-16netfilter: ipv4: code indentationIan Morris1-3/+3
2015-10-16netfilter: ipv4: function definition layoutIan Morris1-3/+3
2015-10-16netfilter: ipv4: ternary operator layoutIan Morris1-3/+3
2015-10-16netfilter: ipv4: label placementIan Morris1-1/+1
2015-09-18netfilter: x_tables: Pass struct net in xt_action_paramEric W. Biederman1-0/+1
2015-09-18inet netfilter: Remove hook from ip6t_do_table, arp_do_table, ipt_do_tableEric W. Biederman1-1/+1
2015-09-17netfilter: Use nf_hook_state.netEric W. Biederman1-4/+4
2015-08-28Revert "netfilter: xtables: compute exact size needed for jumpstack"Florian Westphal1-18/+10
2015-07-15netfilter: xtables: remove __pure annotationFlorian Westphal1-1/+1
2015-07-15netfilter: add and use jump label for xt_teeFlorian Westphal1-1/+2
2015-07-15netfilter: xtables: don't save/restore jumpstack offsetFlorian Westphal1-17/+20
2015-07-15netfilter: xtables: compute exact size needed for jumpstackFlorian Westphal1-10/+18
2015-06-15netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference.Eric Dumazet1-2/+2
2015-06-12netfilter: xtables: avoid percpu ruleset duplicationFlorian Westphal1-48/+16
2015-06-12netfilter: xtables: use percpu rule countersFlorian Westphal1-4/+27
2015-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-3/+1
2015-05-26netfilter: remove unused comefrom hookmask argumentFlorian Westphal1-3/+1
2015-05-20netfilter: ensure number of counters is >0 in do_replace()Dave Jones1-0/+6
2015-04-04netfilter: Pass nf_hook_state through ipt_do_table().David S. Miller1-7/+6
2015-03-19netfilter: restore rule tracing via nfnetlink_logPablo Neira Ayuso1-3/+3
2014-04-05netfilter: Can't fail and free after table replacementThomas Graf1-2/+4
2013-10-22netfilter: x_tables: fix ordering of jumpstack allocation and table updateWill Deacon1-0/+5
2013-04-18netfilter: add my copyright statementsPatrick McHardy1-0/+1
2013-04-05netfilter: nf_log: prepare net namespace support for loggersGao feng1-1/+2
2013-04-02netfilter: use IS_ENABLE to replace if defined in TRACE targetGao feng1-4/+2
2013-01-22netfilter: Use IS_ERR_OR_NULL().YOSHIFUJI Hideaki / 吉藤英明1-5/+5
2012-11-18net: Allow userns root to control ipv4Eric W. Biederman1-4/+4
2012-05-15net: Convert net_ratelimit uses to net_<level>_ratelimitedJoe Perches1-2/+1
2012-04-15net: cleanup unsigned to unsigned intEric Dumazet1-1/+1
2011-06-16netfilter: ip_tables: fix compile with debugSebastian Andrzej Siewior1-1/+1
2011-04-19Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6David S. Miller1-16/+12
2011-04-04netfilter: get rid of atomic ops in fast pathEric Dumazet1-16/+12