aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2016-11-18netns: make struct pernet_operations::id unsigned intAlexey Dobriyan1-1/+1
2016-11-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+4
2016-11-13netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL testJulia Lawall2-20/+20
2016-11-09netfilter: conntrack: simplify init/uninit of L4 protocol trackersDavide Caratti1-53/+23
2016-11-03netfilter: nf_tables: use hook state from xt_action_param structurePablo Neira Ayuso5-14/+13
2016-11-03netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso6-16/+9
2016-11-01netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.cPablo Neira Ayuso3-0/+171
2016-11-01netfilter: nf_tables: add fib expressionFlorian Westphal3-0/+247
2016-10-31netfilter: nft_dup: do not use sreg_dev if the user doesn't specify itLiping Zhang1-2/+4
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso2-4/+8
2016-09-25netfilter: nf_log: get rid of XT_LOG_* macrosLiping Zhang1-3/+3
2016-09-25netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang3-4/+4
2016-09-24netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole2-2/+2
2016-09-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+7
2016-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2016-09-12netfilter: Add the missed return value check of nft_register_chain_typeGao Feng2-2/+8
2016-09-12netfilter: nf_tables: ensure proper initialization of nft_pktinfo fieldsPablo Neira Ayuso1-1/+1
2016-09-07netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilterGao Feng1-6/+7
2016-09-07netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfilter.Gao Feng1-2/+2
2016-09-06netfilter: nft_chain_route: re-route before skb is queued to userspaceLiping Zhang1-4/+7
2016-08-30netfilter: log: Check param to avoid overflow in nf_log_setGao Feng2-4/+2
2016-08-30netfilter: log_arp: Use ARPHRD_ETHER instead of literal '1'Gao Feng1-1/+1
2016-08-25netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang1-0/+1
2016-08-13netfilter: remove ip_conntrack* sysctl compat codePablo Neira Ayuso5-615/+1
2016-08-12netfilter: use_nf_conn_expires helper in more placesFlorian Westphal1-2/+1
2016-08-12netfilter: nf_dup4: remove redundant checksum recalculationLiping Zhang1-6/+4
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal2-43/+49
2016-07-11netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang1-4/+10
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches2-32/+29
2016-07-01netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso1-4/+0
2016-06-24netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCPLiping Zhang1-0/+3
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal1-4/+2
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal1-0/+3
2016-05-05netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso2-385/+76
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal2-7/+5
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal1-2/+6
2016-05-05netfilter: conntrack: small refactoring of conntrack seq_printfFlorian Westphal1-5/+19
2016-04-29netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso2-4/+8
2016-04-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-455/+175
2016-04-14netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2-86/+10
2016-04-14netfilter: x_tables: remove obsolete checkFlorian Westphal2-15/+0
2016-04-14netfilter: x_tables: remove obsolete overflow check for compat case tooFlorian Westphal2-4/+0
2016-04-14netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2-217/+52
2016-04-14netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2-29/+14
2016-04-14netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal1-46/+36
2016-04-14netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal1-35/+24
2016-04-14netfilter: x_tables: check for bogus target offsetFlorian Westphal2-4/+6
2016-04-14netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal2-2/+4
2016-04-14netfilter: x_tables: kill check_entry helperFlorian Westphal2-23/+16
2016-04-14netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal2-21/+2