summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds2016-07-251-1/+22
|\
| * locking/spinlock, netfilter: Fix nf_conntrack_lock() barriersPeter Zijlstra2016-06-141-1/+22
* | netfilter: conntrack: skip clash resolution if nat is in placePablo Neira Ayuso2016-07-121-0/+1
* | Merge tag 'ipvs-fixes2-for-v4.7' of https://git.kernel.org/pub/scm/linux/kern...Pablo Neira Ayuso2016-07-111-2/+4
|\ \
| * | ipvs: fix bind to link-local mcast IPv6 address in backupQuentin Armitage2016-07-071-2/+4
* | | netfilter: nft_ct: fix expiration getterFlorian Westphal2016-07-081-5/+1
* | | netfilter: conntrack: avoid integer overflow when resizingFlorian Westphal2016-07-011-0/+7
|/ /
* | netfilter: nft_meta: set skb->nf_trace appropriatelyLiping Zhang2016-06-231-1/+1
* | netfilter: nf_tables: fix memory leak if expr init failsLiping Zhang2016-06-231-1/+3
* | netfilter: nf_tables: fix a wrong check to skip the inactive rulesLiping Zhang2016-06-151-1/+1
* | netfilter: nf_tables: fix wrong destroy anonymous sets if binding failsLiping Zhang2016-06-151-6/+1
* | netfilter: nf_tables: reject loops from set element jump to chainPablo Neira Ayuso2016-06-153-10/+11
* | netfilter: nf_tables: fix wrong check of NFT_SET_MAP in nf_tables_bind_setLiping Zhang2016-06-151-1/+1
* | netfilter: conntrack: destroy kmemcache on module removalFlorian Westphal2016-06-151-0/+2
|/
* ipvs: update real-server binding of outgoing connections in SIP-peMarco Angaroni2016-06-062-4/+6
* netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal2016-06-021-2/+2
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2016-06-0110-23/+32
|\
| * netfilter: nf_ct_helper: bail out on duplicated helpersPablo Neira Ayuso2016-05-311-5/+4
| * netfilter: nf_tables: validate NFTA_SET_TABLE parameterPhil Turnbull2016-05-301-0/+2
| * netfilter: nf_ct_helper: Fix helper unregister count.Taehee Yoo2016-05-305-0/+5
| * netfilter: nf_queue: Make the queue_handler pernetEric W. Biederman2016-05-252-15/+20
| * netfilter: conntrack: remove leftover binary sysctl defineFlorian Westphal2016-05-251-2/+0
| * netfilter: nfnetlink_queue: fix timestamp attributeFlorian Westphal2016-05-121-1/+1
* | net: define gso types for IPx over IPv4 and IPv6Tom Herbert2016-05-201-10/+7
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2016-05-153-0/+4
|\ \
| * | nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds2016-05-141-1/+3
| |/
| * netfilter: nfnetlink_acct: validate NFACCT_QUOTA parameterPhil Turnbull2016-05-051-0/+2
| * netfilter: IDLETIMER: fix race condition when destroy the targetLiping Zhang2016-04-291-0/+1
| * netfilter: conntrack: init all_locks to avoid debug warningFlorian Westphal2016-04-291-1/+1
* | netfilter: conntrack: remove uninitialized shadow variableArnd Bergmann2016-05-101-1/+0
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2016-05-0917-310/+726
|\ \
| * | netfilter: conntrack: use single slab cacheFlorian Westphal2016-05-091-22/+14
| * | netfilter: conntrack: use a single nat bysource table for all namespacesFlorian Westphal2016-05-091-16/+17
| * | netfilter: conntrack: make netns address part of nat bysrc hashFlorian Westphal2016-05-091-3/+3
| * | Merge tag 'ipvs2-for-v4.7' of https://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso2016-05-062-4/+26
| |\ \
| | * | ipvs: make drop_entry protection effective for SIP-peMarco Angaroni2016-05-062-4/+26
| * | | netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal2016-05-063-28/+22
| * | | netfilter: conntrack: make netns address part of expect hashFlorian Westphal2016-05-061-7/+10
| * | | netfilter: conntrack: check netns when walking expect hashFlorian Westphal2016-05-062-4/+27
| |/ /
| * | netfilter: nf_tables: allow set names up to 32 bytesPablo Neira Ayuso2016-05-051-3/+3
| * | netfilter: conntrack: introduce clash resolution on insertion racePablo Neira Ayuso2016-05-053-3/+54
| * | netfilter: conntrack: introduce nf_ct_acct_update()Pablo Neira Ayuso2016-05-051-23/+19
| * | netfilter: conntrack: __nf_ct_l4proto_find() always returns valid pointerPablo Neira Ayuso2016-05-051-1/+1
| * | netfilter: conntrack: consider ct netns in early_drop logicFlorian Westphal2016-05-051-18/+25
| * | netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal2016-05-056-59/+56
| * | netfilter: conntrack: make netns address part of hashFlorian Westphal2016-05-051-17/+18
| * | netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal2016-05-052-10/+16
| * | netfilter: conntrack: use nf_ct_key_equal() in more placesFlorian Westphal2016-05-051-18/+11
| * | netfilter: conntrack: don't attempt to iterate over empty tableFlorian Westphal2016-05-051-0/+3
| * | netfilter: conntrack: fix lookup race during hash resizeFlorian Westphal2016-05-051-5/+19