aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2017-05-24netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang1-1/+6
2017-05-23netfilter: nat: use atomic bit op to clear the _SRC_NAT_DONE_BITLiping Zhang1-1/+1
2017-05-23netfilter: nft_set_rbtree: handle element re-addition after deletionPablo Neira Ayuso1-11/+11
2017-05-23netfilter: conntrack: fix false CRC32c mismatch using paged skbDavide Caratti1-3/+6
2017-05-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller14-72/+227
2017-05-18netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPATWillem de Bruijn1-8/+13
2017-05-15netfilter: nf_tables: revisit chain/object refcounting from elementsPablo Neira Ayuso5-17/+80
2017-05-15netfilter: nf_tables: missing sanitization in data from userspacePablo Neira Ayuso2-7/+24
2017-05-15netfilter: nf_tables: can't assume lock is acquired when dumping set elemsLiping Zhang2-23/+57
2017-05-15netfilter: synproxy: fix conntrackd interactionEric Leblond1-0/+4
2017-05-15netfilter: xtables: zero padding in data_to_userWillem de Bruijn1-3/+6
2017-05-15Merge tag 'ipvs-fixes-for-v4.12' of http://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvsPablo Neira Ayuso1-5/+14
2017-05-15netfilter: nfnl_cthelper: reject del request if helper obj is in useLiping Zhang2-6/+17
2017-05-15netfilter: introduce nf_conntrack_helper_put helper functionLiping Zhang3-5/+11
2017-05-15netfilter: don't setup nat info for confirmed ctLiping Zhang1-0/+4
2017-05-15netfilter: ctnetlink: Make some parameters integer to avoid enum mismatchMatthias Kaehlcke1-4/+3
2017-05-10Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tipLinus Torvalds1-4/+4
2017-05-08mm, vmalloc: use __GFP_HIGHMEM implicitlyMichal Hocko1-2/+1
2017-05-08treewide: use kv[mz]alloc* rather than opencoded variantsMichal Hocko2-21/+5
2017-05-08ipvs: SNAT packet replies only for NATed connectionsJulian Anastasov1-5/+14
2017-05-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds10-58/+113
2017-05-03Merge branch 'stable-4.12' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-98/+28
2017-05-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller9-57/+112
2017-05-03netfilter: conntrack: Force inlining of build check to prevent build failureGeert Uytterhoeven1-1/+1
2017-05-03netfilter: nf_tables: check if same extensions are set when adding elementsPablo Neira Ayuso1-0/+5
2017-05-02audit: normalize NETFILTER_PKTRichard Guy Briggs1-97/+27
2017-05-02netfilter: use consistent ipv4 network offset in xt_AUDITRichard Guy Briggs1-1/+1
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller70-506/+533
2017-05-01netfilter: nf_ct_ext: invoke destroy even when ext is not attachedLiping Zhang1-6/+2
2017-05-01Merge tag 'ipvs3-for-v4.12' of http://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs-nextPablo Neira Ayuso2-23/+1
2017-05-01netfilter: nf_queue: only call synchronize_net twice if nf_queue is activeFlorian Westphal4-22/+26
2017-05-01netfilter: nf_log: don't call synchronize_rcu in nf_log_unsetFlorian Westphal2-2/+1
2017-05-01netfilter: batch synchronize_net calls during hook unregisterFlorian Westphal1-6/+40
2017-04-28Merge tag 'ipvs-fixes-for-v4.11' of http://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvsPablo Neira Ayuso1-5/+17
2017-04-28netfilter: x_tables: unlock on error in xt_find_table_lock()Dan Carpenter1-1/+3
2017-04-28ipvs: explicitly forbid ipv6 service/dest creation if ipv6 mod is disabledPaolo Abeni1-5/+17
2017-04-28ipvs: change comparison on sync_refresh_periodAaron Conole1-1/+1
2017-04-28ipvs: remove unused function ip_vs_set_state_timeoutAaron Conole1-22/+0
2017-04-26netfilter: don't attach a nat extension by defaultFlorian Westphal1-6/+0
2017-04-26netfilter: pptp: attach nat extension when neededFlorian Westphal1-2/+10
2017-04-26netfilter: conntrack: handle initial extension alloc via kreallocFlorian Westphal1-36/+15
2017-04-26netfilter: conntrack: mark extension structs as constFlorian Westphal8-9/+9
2017-04-26netfilter: conntrack: remove prealloc supportFlorian Westphal2-46/+4
2017-04-26ipvs: convert to use pernet nf_hook apiFlorian Westphal1-10/+9
2017-04-25netfilter: nft_dynset: continue to next expr if _OP_ADD succeededLiping Zhang1-3/+2
2017-04-24netfilter: xt_socket: Fix broken IPv6 handlingPeter Tirsek1-1/+1
2017-04-24netfilter: ctnetlink: acquire ct->lock before operating nf_ct_seqadjLiping Zhang1-6/+15
2017-04-24netfilter: ctnetlink: make it safer when updating ct->statusLiping Zhang1-9/+24
2017-04-24netfilter: ctnetlink: fix deadlock due to acquire _expect_lock twiceLiping Zhang1-12/+12
2017-04-24netfilter: ctnetlink: drop the incorrect cthelper module requestLiping Zhang1-16/+1