summaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2016-03-28netfilter: ipv4: fix NULL dereferenceLiping Zhang1-26/+28
2016-03-28netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_EN...Pablo Neira Ayuso2-0/+4
2016-03-28netfilter: x_tables: fix unconditional helperFlorian Westphal2-21/+20
2016-03-28netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal2-4/+8
2016-03-28netfilter: x_tables: validate e->target_offset earlyFlorian Westphal2-18/+16
2016-03-14Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-22/+8
2016-03-14netfilter: Allow calling into nat helper without skb_dst.Jarno Rajahalme1-22/+8
2016-03-13ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller1-2/+10
2016-03-02netfilter: nft_masq: support port rangePablo Neira Ayuso1-1/+6
2016-03-02netfilter: xtables: don't hook tables by defaultFlorian Westphal8-96/+180
2016-03-02netfilter: xtables: prepare for on-demand hook registerFlorian Westphal8-46/+55
2016-03-02netfilter: nf_defrag_ipv4: Drop redundant ip_send_check()Joe Stringer1-3/+1
2016-02-16ipv4: Namespaceify ip_default_ttl sysctl knobNikolay Borisov1-1/+2
2016-01-28inet: frag: Always orphan skbs inside ip_defrag()Joe Stringer1-2/+0
2015-12-28netfilter: nf_tables: release objects on netns destructionPablo Neira Ayuso2-2/+2
2015-12-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-1/+0
2015-12-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2015-12-15net: Eliminate NETIF_F_GEN_CSUM and NETIF_F_V[46]_CSUMTom Herbert1-1/+2
2015-12-10netfilter: nf_dup: add missing dependencies with NF_CONNTRACKPablo Neira Ayuso1-0/+1
2015-11-23netfilter: remove duplicate includestephen hemminger1-1/+0
2015-11-18net ipv4: use preferred log methodsBastian Stender3-15/+15
2015-11-09netfilter: Fix removal of GRE expectation entries created by PPTPAnthony Lineham1-1/+1
2015-11-05ipv4: use sk_fullsock() in ipv4_conntrack_defrag()Eric Dumazet1-3/+2
2015-10-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-3/+2
2015-10-17Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso4-6/+7
2015-10-16netfilter: ipv4: whitespace around operatorsIan Morris3-6/+6
2015-10-16netfilter: ipv4: code indentationIan Morris3-5/+5
2015-10-16netfilter: ipv4: function definition layoutIan Morris2-6/+6
2015-10-16netfilter: ipv4: ternary operator layoutIan Morris2-5/+5
2015-10-16netfilter: ipv4: label placementIan Morris2-2/+2
2015-10-16netfilter: remove hook owner refcountingFlorian Westphal4-14/+0
2015-10-12ipv4: Pass struct net into ip_defrag and ip_check_defragEric W. Biederman1-3/+4
2015-10-12netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverselucien1-3/+1
2015-10-08ipv4, ipv6: Pass net into ip_local_out and ip6_local_outEric W. Biederman3-3/+3
2015-10-08ipv4: Merge ip_local_out and ip_local_out_skEric W. Biederman3-3/+3
2015-10-01netfilter: fix Kconfig dependencies for nf_dup_ipv{4,6}Pablo Neira Ayuso1-0/+1
2015-09-29ipv4: Pass struct net into ip_route_me_harderEric W. Biederman5-5/+7
2015-09-29netfilter: ipt_SYNPROXY: Pass snet into synproxy_send_tcpEric W. Biederman1-7/+9
2015-09-29ipv4: Push struct net down into nf_send_resetEric W. Biederman3-3/+3
2015-09-18netfilter: Pass net into nf_xfrm_me_harderEric W. Biederman1-2/+2
2015-09-18netfilter: Pass priv instead of nf_hook_ops to netfilter hooksEric W. Biederman15-51/+51
2015-09-18netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tupleEric W. Biederman1-2/+2
2015-09-18netfilter: Pass net to nf_dup_ipv4 and nf_dup_ipv6Eric W. Biederman2-20/+5
2015-09-18netfilter: x_tables: Use par->net instead of computing from the passed net de...Eric W. Biederman2-4/+3
2015-09-18netfilter: x_tables: Pass struct net in xt_action_paramEric W. Biederman2-0/+2
2015-09-18netfilter: nf_tables: kill nft_pktinfo.opsEric W. Biederman8-10/+9
2015-09-18inet netfilter: Prefer state->hook to ops->hooknumEric W. Biederman3-10/+10
2015-09-18inet netfilter: Remove hook from ip6t_do_table, arp_do_table, ipt_do_tableEric W. Biederman8-22/+15
2015-09-17netfilter: Use nf_hook_state.netEric W. Biederman10-30/+19
2015-09-02netfilter: nf_dup{4, 6}: fix build error when nf_conntrack disabledDaniel Borkmann1-0/+1