summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2016-06-23netfilter: nft_meta: set skb->nf_trace appropriatelyLiping Zhang1-1/+1
2016-06-23netfilter: nf_tables: fix memory leak if expr init failsLiping Zhang1-1/+3
2016-06-23netfilter: Allow xt_owner in any user namespaceEric W. Biederman1-6/+35
2016-06-23netfilter: move zone info into struct nf_connFlorian Westphal1-31/+2
2016-06-23netfilter: nf_log: Remove NULL checkShivani Bhardwaj1-1/+1
2016-06-23netfilter: conntrack: align nf_conn on cacheline boundaryFlorian Westphal1-1/+1
2016-06-23netfilter: xt_TRACE: add explicitly nf_logger_find_get callLiping Zhang1-6/+19
2016-06-23netfilter: nf_log: handle NFPROTO_INET properly in nf_logger_[find_get|put]Liping Zhang2-20/+21
2016-06-23netfilter: x_tables: fix possible ZERO_SIZE_PTR pointer dereferencing error.Xiubo Li1-0/+3
2016-06-15netfilter: nf_tables: fix a wrong check to skip the inactive rulesLiping Zhang1-1/+1
2016-06-15netfilter: nf_tables: fix wrong destroy anonymous sets if binding failsLiping Zhang1-6/+1
2016-06-15netfilter: nf_tables: reject loops from set element jump to chainPablo Neira Ayuso3-10/+11
2016-06-15netfilter: nf_tables: fix wrong check of NFT_SET_MAP in nf_tables_bind_setLiping Zhang1-1/+1
2016-06-15netfilter: conntrack: destroy kmemcache on module removalFlorian Westphal1-0/+2
2016-06-14locking/spinlock, netfilter: Fix nf_conntrack_lock() barriersPeter Zijlstra1-1/+22
2016-06-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller13-29/+40
2016-06-07net: sched: do not acquire qdisc spinlock in qdisc/class stats dumpEric Dumazet1-1/+1
2016-06-07netfilter: helper: avoid extra expectation iterations on unregisterFlorian Westphal1-29/+32
2016-06-06ipvs: update real-server binding of outgoing connections in SIP-peMarco Angaroni2-4/+6
2016-06-02netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal1-2/+2
2016-06-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller10-23/+32
2016-05-31netfilter: nf_ct_helper: bail out on duplicated helpersPablo Neira Ayuso1-5/+4
2016-05-30netfilter: nf_tables: validate NFTA_SET_TABLE parameterPhil Turnbull1-0/+2
2016-05-30netfilter: nf_ct_helper: Fix helper unregister count.Taehee Yoo5-0/+5
2016-05-25netfilter: nf_queue: Make the queue_handler pernetEric W. Biederman2-15/+20
2016-05-25netfilter: conntrack: remove leftover binary sysctl defineFlorian Westphal1-2/+0
2016-05-20net: define gso types for IPx over IPv4 and IPv6Tom Herbert1-10/+7
2016-05-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-0/+4
2016-05-14nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds1-1/+3
2016-05-12netfilter: nfnetlink_queue: fix timestamp attributeFlorian Westphal1-1/+1
2016-05-10netfilter: conntrack: remove uninitialized shadow variableArnd Bergmann1-1/+0
2016-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller17-310/+726
2016-05-09netfilter: conntrack: use single slab cacheFlorian Westphal1-22/+14
2016-05-09netfilter: conntrack: use a single nat bysource table for all namespacesFlorian Westphal1-16/+17
2016-05-09netfilter: conntrack: make netns address part of nat bysrc hashFlorian Westphal1-3/+3
2016-05-06Merge tag 'ipvs2-for-v4.7' of https://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso2-4/+26
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal3-28/+22
2016-05-06netfilter: conntrack: make netns address part of expect hashFlorian Westphal1-7/+10
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal2-4/+27
2016-05-06ipvs: make drop_entry protection effective for SIP-peMarco Angaroni2-4/+26
2016-05-05netfilter: nfnetlink_acct: validate NFACCT_QUOTA parameterPhil Turnbull1-0/+2
2016-05-05netfilter: nf_tables: allow set names up to 32 bytesPablo Neira Ayuso1-3/+3
2016-05-05netfilter: conntrack: introduce clash resolution on insertion racePablo Neira Ayuso3-3/+54
2016-05-05netfilter: conntrack: introduce nf_ct_acct_update()Pablo Neira Ayuso1-23/+19
2016-05-05netfilter: conntrack: __nf_ct_l4proto_find() always returns valid pointerPablo Neira Ayuso1-1/+1
2016-05-05netfilter: conntrack: consider ct netns in early_drop logicFlorian Westphal1-18/+25
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal6-59/+56
2016-05-05netfilter: conntrack: make netns address part of hashFlorian Westphal1-17/+18
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal2-10/+16
2016-05-05netfilter: conntrack: use nf_ct_key_equal() in more placesFlorian Westphal1-18/+11