aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso2-4/+8
2016-09-25netfilter: nf_log: get rid of XT_LOG_* macrosLiping Zhang1-3/+3
2016-09-25netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang3-4/+4
2016-09-24netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole2-2/+2
2016-09-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+7
2016-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2016-09-12netfilter: Add the missed return value check of nft_register_chain_typeGao Feng2-2/+8
2016-09-12netfilter: nf_tables: ensure proper initialization of nft_pktinfo fieldsPablo Neira Ayuso1-1/+1
2016-09-07netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilterGao Feng1-6/+7
2016-09-07netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfilter.Gao Feng1-2/+2
2016-09-06netfilter: nft_chain_route: re-route before skb is queued to userspaceLiping Zhang1-4/+7
2016-08-30netfilter: log: Check param to avoid overflow in nf_log_setGao Feng2-4/+2
2016-08-30netfilter: log_arp: Use ARPHRD_ETHER instead of literal '1'Gao Feng1-1/+1
2016-08-25netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang1-0/+1
2016-08-13netfilter: remove ip_conntrack* sysctl compat codePablo Neira Ayuso5-615/+1
2016-08-12netfilter: use_nf_conn_expires helper in more placesFlorian Westphal1-2/+1
2016-08-12netfilter: nf_dup4: remove redundant checksum recalculationLiping Zhang1-6/+4
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal2-43/+49
2016-07-11netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang1-4/+10
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches2-32/+29
2016-07-01netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso1-4/+0
2016-06-24netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCPLiping Zhang1-0/+3
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal1-4/+2
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal1-0/+3
2016-05-05netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso2-385/+76
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal2-7/+5
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal1-2/+6
2016-05-05netfilter: conntrack: small refactoring of conntrack seq_printfFlorian Westphal1-5/+19
2016-04-29netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso2-4/+8
2016-04-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-455/+175
2016-04-14netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2-86/+10
2016-04-14netfilter: x_tables: remove obsolete checkFlorian Westphal2-15/+0
2016-04-14netfilter: x_tables: remove obsolete overflow check for compat case tooFlorian Westphal2-4/+0
2016-04-14netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2-217/+52
2016-04-14netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2-29/+14
2016-04-14netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal1-46/+36
2016-04-14netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal1-35/+24
2016-04-14netfilter: x_tables: check for bogus target offsetFlorian Westphal2-4/+6
2016-04-14netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal2-2/+4
2016-04-14netfilter: x_tables: kill check_entry helperFlorian Westphal2-23/+16
2016-04-14netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal2-21/+2
2016-04-14netfilter: x_tables: validate targets of jumpsFlorian Westphal2-0/+32
2016-04-14netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal2-3/+9
2016-04-07netfilter: arp_tables: register table in initnsFlorian Westphal1-0/+6
2016-03-28netfilter: ipv4: fix NULL dereferenceLiping Zhang1-26/+28
2016-03-28netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIESPablo Neira Ayuso2-0/+4
2016-03-28netfilter: x_tables: fix unconditional helperFlorian Westphal2-21/+20
2016-03-28netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal2-4/+8
2016-03-28netfilter: x_tables: validate e->target_offset earlyFlorian Westphal2-18/+16
2016-03-14Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-22/+8