summaryrefslogtreecommitdiffstats
path: root/net/ipv6/netfilter
AgeCommit message (Expand)AuthorFilesLines
2016-11-29netfilter: ipv6: nf_defrag: drop mangled skb on ream errorFlorian Westphal2-3/+3
2016-11-24netfilter: Update nf_send_reset6 to consider L3 domainDavid Ahern1-0/+1
2016-10-31netfilter: nft_dup: do not use sreg_dev if the user doesn't specify itLiping Zhang1-2/+4
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso2-3/+8
2016-09-25netfilter: nf_log: get rid of XT_LOG_* macrosLiping Zhang1-7/+7
2016-09-25netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang2-3/+3
2016-09-24netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole2-2/+2
2016-09-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+7
2016-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2016-09-12netfilter: Add the missed return value check of nft_register_chain_typeGao Feng1-1/+4
2016-09-12netfilter: nf_tables: don't drop IPv6 packets that cannot parse transportPablo Neira Ayuso2-6/+2
2016-09-06netfilter: nft_chain_route: re-route before skb is queued to userspaceLiping Zhang1-3/+7
2016-08-30netfilter: log: Check param to avoid overflow in nf_log_setGao Feng1-2/+1
2016-08-25netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang1-0/+1
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal1-21/+24
2016-07-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-12/+8
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches1-8/+8
2016-07-01netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso1-4/+0
2016-06-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-0/+1
2016-05-30netfilter: nf_dup_ipv6: set again FLOWI_FLAG_KNOWN_NH at flowi6_flagsPaolo Abeni1-0/+1
2016-05-05netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso1-188/+41
2016-04-29netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso1-2/+4
2016-04-25netfilter: ip6t_SYNPROXY: unnecessary to check whether ip6_route_output retur...Liping Zhang1-1/+1
2016-04-14netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal1-44/+5
2016-04-14netfilter: x_tables: remove obsolete checkFlorian Westphal1-7/+0
2016-04-14netfilter: x_tables: remove obsolete overflow check for compat case tooFlorian Westphal1-2/+0
2016-04-14netfilter: x_tables: do compat validation via translate_tableFlorian Westphal1-125/+23
2016-04-14netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal1-18/+9
2016-04-14netfilter: ip6_tables: simplify translate_compat_table argsFlorian Westphal1-35/+24
2016-04-14netfilter: x_tables: check for bogus target offsetFlorian Westphal1-2/+3
2016-04-14netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal1-1/+2
2016-04-14netfilter: x_tables: kill check_entry helperFlorian Westphal1-12/+8
2016-04-14netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal1-11/+1
2016-04-14netfilter: x_tables: validate targets of jumpsFlorian Westphal1-0/+16
2016-04-14netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal1-0/+4
2016-04-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-27/+31
2016-04-07netfilter: ipv6: unnecessary to check whether ip6_route_output() returns NULLHaishuang Yan1-1/+1
2016-03-29netfilter: ip6t_SYNPROXY: remove magic number for hop_limitLiping Zhang1-26/+30
2016-03-28netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_EN...Pablo Neira Ayuso1-0/+2
2016-03-28netfilter: x_tables: fix unconditional helperFlorian Westphal1-12/+11
2016-03-28netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal1-2/+4
2016-03-28netfilter: x_tables: validate e->target_offset earlyFlorian Westphal1-9/+8
2016-03-14netfilter: Allow calling into nat helper without skb_dst.Jarno Rajahalme1-22/+8
2016-03-02netfilter: nft_masq: support port rangePablo Neira Ayuso1-1/+6
2016-03-02netfilter: xtables: don't hook tables by defaultFlorian Westphal6-85/+137
2016-03-02netfilter: xtables: prepare for on-demand hook registerFlorian Westphal6-30/+37
2016-02-01netfilter: conntrack: resched in nf_ct_iterate_cleanupFlorian Westphal1-3/+71
2015-12-28netfilter: nf_tables: release objects on netns destructionPablo Neira Ayuso1-1/+1
2015-12-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller3-114/+74
2015-12-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1