summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2016-05-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-0/+4
2016-05-14nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds1-1/+3
2016-05-10netfilter: conntrack: remove uninitialized shadow variableArnd Bergmann1-1/+0
2016-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller17-310/+726
2016-05-09netfilter: conntrack: use single slab cacheFlorian Westphal1-22/+14
2016-05-09netfilter: conntrack: use a single nat bysource table for all namespacesFlorian Westphal1-16/+17
2016-05-09netfilter: conntrack: make netns address part of nat bysrc hashFlorian Westphal1-3/+3
2016-05-06Merge tag 'ipvs2-for-v4.7' of https://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso2-4/+26
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal3-28/+22
2016-05-06netfilter: conntrack: make netns address part of expect hashFlorian Westphal1-7/+10
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal2-4/+27
2016-05-06ipvs: make drop_entry protection effective for SIP-peMarco Angaroni2-4/+26
2016-05-05netfilter: nfnetlink_acct: validate NFACCT_QUOTA parameterPhil Turnbull1-0/+2
2016-05-05netfilter: nf_tables: allow set names up to 32 bytesPablo Neira Ayuso1-3/+3
2016-05-05netfilter: conntrack: introduce clash resolution on insertion racePablo Neira Ayuso3-3/+54
2016-05-05netfilter: conntrack: introduce nf_ct_acct_update()Pablo Neira Ayuso1-23/+19
2016-05-05netfilter: conntrack: __nf_ct_l4proto_find() always returns valid pointerPablo Neira Ayuso1-1/+1
2016-05-05netfilter: conntrack: consider ct netns in early_drop logicFlorian Westphal1-18/+25
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal6-59/+56
2016-05-05netfilter: conntrack: make netns address part of hashFlorian Westphal1-17/+18
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal2-10/+16
2016-05-05netfilter: conntrack: use nf_ct_key_equal() in more placesFlorian Westphal1-18/+11
2016-05-05netfilter: conntrack: don't attempt to iterate over empty tableFlorian Westphal1-0/+3
2016-05-05netfilter: conntrack: fix lookup race during hash resizeFlorian Westphal1-5/+19
2016-05-05netfilter: conntrack: keep BH enabled during lookupFlorian Westphal1-17/+8
2016-05-05netfilter: nftables: add connlabel set supportFlorian Westphal1-0/+30
2016-04-29netfilter: IDLETIMER: fix race condition when destroy the targetLiping Zhang1-0/+1
2016-04-29netfilter: conntrack: init all_locks to avoid debug warningFlorian Westphal1-1/+1
2016-04-25netfilter/ipvs: use nla_put_u64_64bit()Nicolas Dichtel1-12/+24
2016-04-25Merge tag 'ipvs-for-v4.7' of https://git.kernel.org/pub/scm/linux/kernel/git/...Pablo Neira Ayuso5-5/+243
2016-04-25netfilter: nf_ct_helper: disable automatic helper assignmentPablo Neira Ayuso1-2/+2
2016-04-25netfilter: nft_rbtree: allow adjacent intervals with dynamic updatesPablo Neira Ayuso1-5/+35
2016-04-25netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helperPablo Neira Ayuso1-3/+6
2016-04-25netfilter: nf_tables: parse element flags from nft_del_setelem()Pablo Neira Ayuso1-5/+33
2016-04-25netfilter: nf_tables: introduce nft_setelem_parse_flags() helperPablo Neira Ayuso1-12/+22
2016-04-25netfilter: conntrack: use get_random_once for conntrack hash seedFlorian Westphal1-23/+3
2016-04-25netfilter: conntrack: use get_random_once for nat and expectationsFlorian Westphal2-6/+7
2016-04-25netfilter: conntrack: move generation seqcnt out of netns_ctFlorian Westphal1-9/+11
2016-04-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller7-117/+323
2016-04-23libnl: nla_put_be64(): align on a 64-bit areaNicolas Dichtel8-26/+49
2016-04-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+4
2016-04-20ipvs: don't alter conntrack in OPS modeMarco Angaroni2-1/+6
2016-04-20ipvs: optimize release of connections in OPS modeMarco Angaroni1-3/+23
2016-04-20ipvs: handle connections started by real-serversMarco Angaroni3-1/+214
2016-04-19netfilter: conntrack: don't acquire lock during seq_printfFlorian Westphal2-14/+2
2016-04-18netfilter: ctnetlink: restore inlining for netlink message size calculationPablo Neira Ayuso1-5/+5
2016-04-18netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used'Florian Westphal3-5/+8
2016-04-18netfilter: labels: don't emit ct event if labels were not changedFlorian Westphal1-6/+10
2016-04-18netfilter: connlabels: move helpers to xt_connlabelFlorian Westphal2-19/+12
2016-04-16ip_tunnel_core: iptunnel_handle_offloads returns int and doesn't free skbAlexander Duyck1-4/+2