summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: fix oob accessFlorian Westphal2017-11-301-1/+1
* netfilter: nft_queue: use raw_smp_processor_id()Pablo Neira Ayuso2017-11-301-1/+1
* netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"Florian Westphal2017-11-181-78/+56
* netfilter: nat: avoid use of nf_conn_nat extensionFlorian Westphal2017-11-182-15/+5
* netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev familyLiping Zhang2017-11-151-1/+27
* netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.Jarno Rajahalme2017-10-211-2/+2
* netfilter: nfnl_cthelper: fix incorrect helper->expect_class_maxLiping Zhang2017-10-081-9/+11
* netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang2017-10-084-1/+6
* net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()Manfred Spraul2017-09-271-23/+29
* netfilter: nat: fix src map lookupFlorian Westphal2017-08-301-8/+9
* netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregisterLiping Zhang2017-08-241-3/+10
* ipvs: SNAT packet replies only for NATed connectionsJulian Anastasov2017-07-271-5/+14
* netfilter: synproxy: fix conntrackd interactionEric Leblond2017-07-051-0/+4
* netfilter: xt_TCPMSS: add more sanity tests on tcph->doffEric Dumazet2017-07-051-1/+5
* netfilter: nft_log: restrict the log prefix length to 127Liping Zhang2017-06-172-2/+2
* netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCLPablo Neira Ayuso2017-06-171-7/+9
* netfilter: nf_conntrack_sip: fix wrong memory initialisationChristophe Leroy2017-06-171-2/+0
* netfilter: nft_set_rbtree: handle element re-addition after deletionPablo Neira Ayuso2017-06-141-11/+11
* netfilter: conntrack: refine gc worker heuristics, reduxFlorian Westphal2017-03-121-19/+20
* netfilter: conntrack: remove GC_MAX_EVICTS breakFlorian Westphal2017-03-121-5/+2
* netfilter: nf_ct_helper: warn when not applying default helper assignmentJiri Kosina2017-02-261-13/+26
* netfilter: nft_range: add the missing NULL pointer checkLiping Zhang2016-11-241-0/+6
* netfilter: nf_tables: fix inconsistent element expiration calculationAnders K. Pedersen2016-11-241-5/+9
* netfilter: nat: switch to new rhlist interfaceFlorian Westphal2016-11-241-16/+24
* netfilter: nat: fix cmp return valueFlorian Westphal2016-11-241-3/+6
* netfilter: nft_hash: validate maximum value of u32 netlink hash attributeLaura Garcia Liebana2016-11-241-2/+5
* netfilter: nf_tables: fix oops when inserting an element into a verdict mapLiping Zhang2016-11-081-0/+1
* netfilter: conntrack: refine gc worker heuristicsFlorian Westphal2016-11-081-8/+41
* netfilter: conntrack: fix CT target for UNSPEC helpersFlorian Westphal2016-11-081-3/+8
* netfilter: connmark: ignore skbs with magic untracked conntrack objectsFlorian Westphal2016-11-081-2/+2
* ipvs: use IPVS_CMD_ATTR_MAX for family.maxattrWANG Cong2016-11-081-1/+1
* netfilter: nf_tables: destroy the set if fail to add transactionLiping Zhang2016-10-311-1/+3
* netfilter: ip_vs_sync: fix bogus maybe-uninitialized warningArnd Bergmann2016-10-281-2/+5
* netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_...John W. Linville2016-10-271-1/+1
* netfilter: nf_conntrack_sip: extend request line validationUlrich Weber2016-10-271-1/+4
* netfilter: nf_tables: fix race when create new element in dynsetLiping Zhang2016-10-271-3/+12
* netfilter: nf_tables: fix *leak* when expr clone failLiping Zhang2016-10-274-14/+19
* netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabledLiping Zhang2016-10-271-0/+3
* netfilter: fix nf_queue handlingPablo Neira Ayuso2016-10-203-27/+36
* netfilter: conntrack: restart gc immediately if GC_MAX_EVICTS is reachedNicolas Dichtel2016-10-201-1/+1
* netfilter: x_tables: suppress kmemcheck warningFlorian Westphal2016-10-191-1/+1
* netfilter: nf_tables: avoid uninitialized variable warningArnd Bergmann2016-10-181-6/+4
* netfilter: nft_range: validate operation netlink attributePablo Neira Ayuso2016-10-171-1/+15
* netfilter: nft_exthdr: fix error handling in nft_exthdr_init()Dan Carpenter2016-10-171-1/+2
* netfilter: nf_tables: underflow in nft_parse_u32_check()Dan Carpenter2016-10-171-1/+1
* netfilter: nft_hash: add missing NFTA_HASH_OFFSET's nla_policyLiping Zhang2016-10-171-0/+1
* netfilter: xt_ipcomp: add "ip[6]t_ipcomp" module alias nameLiping Zhang2016-10-171-0/+2
* netfilter: xt_NFLOG: fix unexpected truncated packetLiping Zhang2016-10-171-0/+1
* netfilter: nft_dynset: fix element timeout for HZ != 1000Anders K. Pedersen2016-10-171-2/+4
* netfilter: xt_hashlimit: Add missing ULL suffixes for 64-bit constantsGeert Uytterhoeven2016-10-171-2/+2