summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2018-01-08netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_ex...Jozsef Kadlecsik1-0/+2
2018-01-08netfilter: ipset: Fix "don't update counters" mode when counters used at the ...Jozsef Kadlecsik7-128/+114
2018-01-08netfilter: ipset: use swap macro instead of _manually_ swapping valuesGustavo A. R. Silva3-18/+6
2018-01-08netfilter: nf_tables: flow offload expressionPablo Neira Ayuso4-0/+283
2018-01-08netfilter: flow table support for the mixed IPv4/IPv6 familyPablo Neira Ayuso6-2/+66
2018-01-08netfilter: flow table support for IPv6Pablo Neira Ayuso5-1/+292
2018-01-08netfilter: flow table support for IPv4Pablo Neira Ayuso3-0/+294
2018-01-08netfilter: add generic flow table infrastructurePablo Neira Ayuso4-0/+533
2018-01-08netfilter: nf_tables: add flow table netlink frontendPablo Neira Ayuso4-1/+870
2018-01-08netfilter: nf_conntrack: add IPS_OFFLOAD status bitPablo Neira Ayuso5-6/+50
2018-01-08netfilter: nf_tables: remove nft_dereference()Pablo Neira Ayuso2-6/+3
2018-01-08netfilter: remove defensive check on malformed packets from raw socketsPablo Neira Ayuso13-128/+3
2018-01-08netfilter: meta: secpath supportFlorian Westphal2-0/+45
2018-01-08netfilter: remove struct nf_afinfo and its helper functionsPablo Neira Ayuso5-65/+6
2018-01-08netfilter: remove route_key_size field in struct nf_afinfoPablo Neira Ayuso4-9/+16
2018-01-08netfilter: move reroute indirection to struct nf_ipv6_opsPablo Neira Ayuso8-19/+39
2018-01-08netfilter: move route indirection to struct nf_ipv6_opsPablo Neira Ayuso12-58/+68
2018-01-08netfilter: remove saveroute indirection in struct nf_afinfoPablo Neira Ayuso7-63/+60
2018-01-08netfilter: move checksum_partial indirection to struct nf_ipv6_opsPablo Neira Ayuso7-38/+50
2018-01-08netfilter: move checksum indirection to struct nf_ipv6_opsPablo Neira Ayuso8-27/+44
2018-01-08netfilter: connlimit: split xt_connlimit into front and backendFlorian Westphal6-346/+420
2018-01-08netfilter: nf_tables: remove hooks from family definitionPablo Neira Ayuso8-43/+37
2018-01-08netfilter: nf_tables: remove multihook chains and familiesPablo Neira Ayuso9-78/+49
2018-01-08netfilter: nf_tables_inet: don't use multihook infrastructure anymorePablo Neira Ayuso5-20/+60
2018-01-08netfilter: core: support for NFPROTO_INET hook registrationPablo Neira Ayuso1-9/+44
2018-01-08netfilter: core: pass family as parameter to nf_remove_net_hook()Pablo Neira Ayuso1-5/+5
2018-01-08netfilter: core: pass hook number, family and device to nf_find_hook_list()Pablo Neira Ayuso1-17/+19
2018-01-08netfilter: core: add nf_remove_net_hookPablo Neira Ayuso1-4/+4
2018-01-08netfilter: nf_tables: add nft_set_is_anonymous() helperPablo Neira Ayuso3-5/+10
2018-01-08netfilter: nf_tables: explicit nft_set_pktinfo() call from hook pathPablo Neira Ayuso12-58/+43
2018-01-08netfilter: nf_tables_arp: don't set forward chainPablo Neira Ayuso1-1/+0
2018-01-08netfilter: nf_tables: reject nat hook registration if prio is before conntrackFlorian Westphal1-1/+6
2018-01-08netfilter: core: only allow one nat hook per hook pointFlorian Westphal5-0/+17
2018-01-08netfilter: xtables: add and use xt_request_find_table_lockFlorian Westphal5-51/+65
2018-01-08netfilter: reduce NF_MAX_HOOKS defineFlorian Westphal1-3/+7
2018-01-08netfilter: don't allocate space for arp/bridge hooks unless neededFlorian Westphal8-0/+29
2018-01-08netfilter: don't allocate space for decnet hooks unless neededFlorian Westphal3-0/+8
2018-01-08netfilter: reduce hook array sizes to what is neededFlorian Westphal2-12/+22
2018-01-08netfilter: add defines for arp/decnet max hooksFlorian Westphal3-1/+12
2018-01-08netfilter: reduce size of hook entry point locationsFlorian Westphal5-14/+77
2018-01-08netfilter: core: free hooks with call_rcuFlorian Westphal2-10/+43
2018-01-08netfilter: core: remove synchronize_net call if nfqueue is usedFlorian Westphal5-19/+7
2018-01-08netfilter: core: make nf_unregister_net_hooks simple wrapper againFlorian Westphal1-56/+3
2018-01-08netfilter: nf_conntrack_h323: Remove unwanted comments.Varsha Rao2-71/+13
2018-01-08netfilter: ipset: add resched points during set listingFlorian Westphal3-2/+2
2018-01-08netfilter: ipset: use nfnl_mutex_is_lockedFlorian Westphal1-1/+1
2018-01-08netfilter: ipvs: Remove useless ipvsh param of frag_safe_skb_hpGao Feng3-9/+8
2018-01-08netfilter: conntrack: timeouts can be constFlorian Westphal7-7/+7
2018-01-08netfilter: mark expected switch fall-throughsGustavo A. R. Silva6-2/+9
2018-01-08netfilter: conntrack: l4 protocol trackers can be constFlorian Westphal11-27/+27