summaryrefslogtreecommitdiffstats
path: root/net/netfilter/xt_socket.c
Commit message (Expand)AuthorAgeFilesLines
* net: annotate data-races around sk->sk_markEric Dumazet2023-07-291-2/+2
* netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependencyPablo Neira Ayuso2022-02-131-0/+2
* netfilter: xt_socket: fix a typo in socket_mt_destroy()Eric Dumazet2022-02-091-1/+1
* netfilter: disable defrag once its no longer neededFlorian Westphal2021-04-261-0/+14
* treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner2019-06-191-5/+1
* netfilter: xt_socket: check sk before checking for netns.Flavio Leitner2018-09-281-2/+2
* netfilter: check if the socket netns is correct.Flavio Leitner2018-06-281-0/+8
* netfilter: Decrease code duplication regarding transparent socket optionMáté Eckl2018-06-031-2/+2
* netfilter: x_tables: use pr ratelimiting in all remaining spotsFlorian Westphal2018-02-141-4/+6
* netfilter: xt_socket: Restore mark from full sockets onlySubash Abhinov Kasiviswanathan2017-09-261-2/+2
* netfilter: xt_socket: Fix broken IPv6 handlingPeter Tirsek2017-04-241-1/+1
* netfilter: defrag: only register defrag functionality if neededFlorian Westphal2016-12-061-5/+28
* netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso2016-11-031-2/+2
* netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.cPablo Neira Ayuso2016-11-011-295/+10
* tcp/dccp: do not touch listener sk_refcnt under synfloodEric Dumazet2016-04-041-3/+3
* inet: refactor inet[6]_lookup functions to take skbCraig Gallek2016-02-111-7/+21
* netfilter: x_tables: Use par->net instead of computing from the passed net de...Eric W. Biederman2015-09-181-6/+8
* netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flagHarout Hedeshian2015-06-181-6/+53
* netfilter: x_tables: don't extract flow keys on early demuxed sks in socket m...Daniel Borkmann2015-04-081-45/+50
* netfilter: xt_socket: prepare for TCP_NEW_SYN_RECV supportEric Dumazet2015-03-171-12/+22
* netfilter: xt_socket: fix a stack corruption bugEric Dumazet2015-02-161-9/+12
* netfilter: xt_socket: use sock_gen_put()Eric Dumazet2013-10-171-11/+2
* ipv6: make lookups simpler and fasterEric Dumazet2013-10-091-1/+1
* Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller2013-08-201-5/+61
|\
| * netfilter: tproxy: remove nf_tproxy_core.hFlorian Westphal2013-07-311-5/+61
* | netfilter: xt_socket: fix broken v0 supportEric Dumazet2013-07-151-3/+7
|/
* netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flagEric Dumazet2013-06-201-8/+62
* netfilter: xt_socket: use IP early demuxEric Dumazet2013-05-231-10/+16
* netfilter: xt_socket: fix compilation warnings with gcc 4.7Pablo Neira Ayuso2012-09-031-6/+6
* netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()Hans Schillstrom2012-05-091-2/+2
* net:netfilter: use IS_ENABLEDIgor Maravić2011-12-161-2/+2
* ipv6: Add fragment reporting to ipv6_skip_exthdr().Jesse Gross2011-12-031-1/+3
* netfilter: add more values to enum ip_conntrack_infoEric Dumazet2011-06-061-2/+2
* netfilter: tproxy: do not assign timewait sockets to skb->skFlorian Westphal2011-02-171-2/+11
* netfilter: xt_socket: Make tproto signed in socket_mt6_v1().David S. Miller2010-10-281-4/+3
* netfilter: fix module dependency issues with IPv6 defragmentation, ip6tables ...KOVACS Krisztian2010-10-251-4/+8
* tproxy: added IPv6 support to the socket matchBalazs Scheidler2010-10-211-11/+154
* tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the...Balazs Scheidler2010-10-211-1/+1
* netfilter: nf_conntrack: IPS_UNTRACKED bitEric Dumazet2010-06-081-1/+1
* netfilter: xtables: deconstify struct xt_action_param for matchesJan Engelhardt2010-05-111-3/+3
* netfilter: xtables: substitute temporary defines by final nameJan Engelhardt2010-05-111-3/+3
* netfilter: xt extensions: use pr_<level> (2)Jan Engelhardt2010-03-251-3/+2
* netfilter: xt_socket: make module available for INPUT chainJan Engelhardt2009-10-291-2/+4
* inet: rename some inet_sock fieldsEric Dumazet2009-10-181-1/+1
* netfilter: xt_socket: added new revision of the 'socket' match supporting flagsLaszlo Attila Toth2009-06-091-11/+52
* tproxy: fixe a possible read from an invalid location in the socket matchBalazs Scheidler2008-12-071-1/+1
* netfilter: xtables: move extension arguments into compound structure (1/6)Jan Engelhardt2008-10-081-9/+2
* netfilter: iptables socket matchKOVACS Krisztian2008-10-081-0/+192
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-18 23:34:04 +0000