aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2017-02-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller31-513/+461
2017-02-02netfilter: allow logging from non-init namespacesMichal Kubeček1-0/+24
2017-02-02ipvs: free ip_vs_dest structs when refcnt=0David Windsor1-5/+3
2017-02-02netfilter: merge ctinfo into nfct pointer storage areaFlorian Westphal4-8/+12
2017-02-02netfilter: guarantee 8 byte minalign for template addressesFlorian Westphal1-5/+24
2017-02-02netfilter: add and use nf_ct_set helperFlorian Westphal3-14/+6
2017-02-02skbuff: add and use skb_nfct helperFlorian Westphal3-4/+4
2017-02-02netfilter: reduce direct skb->nfct usageFlorian Westphal1-6/+9
2017-02-02netfilter: conntrack: no need to pass ctinfo to error handlerFlorian Westphal5-7/+3
2017-02-02netfilter: nf_tables: Eliminate duplicated code in nf_tables_table_enable()Feng1-23/+25
2017-01-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller10-60/+73
2017-01-24netfilter: nf_tables: bump set->ndeact on set flushPablo Neira Ayuso1-0/+1
2017-01-24netfilter: nf_tables: deconstify walk callback functionPablo Neira Ayuso3-14/+14
2017-01-24netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCLPablo Neira Ayuso1-7/+9
2017-01-24netfilter: nft_log: restrict the log prefix length to 127Liping Zhang2-2/+2
2017-01-24Introduce a sysctl that modifies the value of PROT_SOCK.Krister Johansen1-4/+3
2017-01-23netfilter: nf_tables: validate the name size when possibleLiping Zhang4-11/+22
2017-01-19netfilter: conntrack: refine gc worker heuristics, reduxFlorian Westphal1-19/+20
2017-01-19netfilter: conntrack: remove GC_MAX_EVICTS breakFlorian Westphal1-5/+2
2017-01-18netfilter: nf_tables: eliminate useless condition checksGao Feng1-12/+3
2017-01-18netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev familyLiping Zhang1-1/+27
2017-01-18netfilter: pkttype: unnecessary to check ipv6 multicast addressLiping Zhang2-6/+2
2017-01-16netfilter: Fix typo in NF_CONNTRACK Kconfig option descriptionWilliam Breathitt Gray1-1/+1
2017-01-16netfilter: nf_tables: fix possible oops when dumping stateful objectsLiping Zhang1-2/+3
2017-01-09xtables: extend matches and targets with .usersizeWillem de Bruijn11-0/+19
2017-01-09xtables: use match, target and data copy_to_user helpers in compatWillem de Bruijn1-10/+4
2017-01-09xtables: add xt_match, xt_target and data copy_to_user functionsWillem de Bruijn1-0/+54
2017-01-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller4-22/+35
2017-01-05netfilter: xt_connlimit: use rb_entry()Geliang Tang1-2/+2
2017-01-05netfilter: conntrack: validate SCTP crc32c in PREROUTINGDavide Caratti1-0/+32
2017-01-05netfilter: select LIBCRC32C together with SCTP conntrackDavide Caratti1-1/+1
2017-01-03netfilter: nft_ct: add average bytes per packet supportLiping Zhang1-1/+21
2017-01-03netfilter: nat: merge udp and udplite helpersFlorian Westphal3-86/+66
2017-01-03netfilter: merge udp and udplite conntrack helpersFlorian Westphal3-325/+123
2016-12-25ktime: Get rid of the unionThomas Gleixner4-5/+5
2016-12-24Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds2-2/+2
2016-12-14netfilter: nft_payload: mangle ckecksum if NFT_PAYLOAD_L4CSUM_PSEUDOHDR is setPablo Neira Ayuso1-8/+19
2016-12-14netfilter: nf_tables: fix oob accessFlorian Westphal1-1/+1
2016-12-14netfilter: nft_queue: use raw_smp_processor_id()Pablo Neira Ayuso1-1/+1
2016-12-14netfilter: nft_quota: reset quota after dumpPablo Neira Ayuso1-12/+14
2016-12-11netfilter: nft_counter: rework atomic dump and resetPablo Neira1-72/+55
2016-12-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller49-529/+1878
2016-12-07netfilter: nft_quota: allow to restore consumed quotaPablo Neira Ayuso1-2/+9
2016-12-07netfilter: xt_bpf: support ebpfWillem de Bruijn1-16/+80
2016-12-07netfilter: x_tables: avoid warn and OOM killer on vmalloc callMarcelo Ricardo Leitner1-1/+3
2016-12-07netfilter: nf_tables: support for set flushingPablo Neira Ayuso3-6/+51
2016-12-07netfilter: nft_set: introduce nft_{hash, rbtree}_deactivate_one()Pablo Neira Ayuso2-8/+27
2016-12-07netfilter: nf_tables: constify struct nft_ctx * parameter in nft_trans_alloc()Pablo Neira Ayuso1-2/+2
2016-12-07netfilter: nat: skip checksum on offload SCTP packetsDavide Caratti1-1/+4
2016-12-07netfilter: nf_tables: allow to filter stateful object dumps by typePablo Neira Ayuso1-0/+50