summaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches2016-07-032-32/+29
* netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso2016-07-011-4/+0
* netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCPLiping Zhang2016-06-241-0/+3
* netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal2016-05-061-4/+2
* netfilter: conntrack: check netns when walking expect hashFlorian Westphal2016-05-061-0/+3
* netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso2016-05-052-385/+76
* netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal2016-05-052-7/+5
* netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal2016-05-051-2/+6
* netfilter: conntrack: small refactoring of conntrack seq_printfFlorian Westphal2016-05-051-5/+19
* netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso2016-04-292-4/+8
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2016-04-242-455/+175
|\
| * netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2016-04-142-86/+10
| * netfilter: x_tables: remove obsolete checkFlorian Westphal2016-04-142-15/+0
| * netfilter: x_tables: remove obsolete overflow check for compat case tooFlorian Westphal2016-04-142-4/+0
| * netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2016-04-142-217/+52
| * netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2016-04-142-29/+14
| * netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal2016-04-141-46/+36
| * netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal2016-04-141-35/+24
| * netfilter: x_tables: check for bogus target offsetFlorian Westphal2016-04-142-4/+6
| * netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal2016-04-142-2/+4
| * netfilter: x_tables: kill check_entry helperFlorian Westphal2016-04-142-23/+16
| * netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal2016-04-142-21/+2
| * netfilter: x_tables: validate targets of jumpsFlorian Westphal2016-04-142-0/+32
| * netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal2016-04-142-3/+9
* | netfilter: arp_tables: register table in initnsFlorian Westphal2016-04-071-0/+6
|/
* netfilter: ipv4: fix NULL dereferenceLiping Zhang2016-03-281-26/+28
* netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_EN...Pablo Neira Ayuso2016-03-282-0/+4
* netfilter: x_tables: fix unconditional helperFlorian Westphal2016-03-282-21/+20
* netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal2016-03-282-4/+8
* netfilter: x_tables: validate e->target_offset earlyFlorian Westphal2016-03-282-18/+16
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2016-03-141-22/+8
|\
| * netfilter: Allow calling into nat helper without skb_dst.Jarno Rajahalme2016-03-141-22/+8
* | ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller2016-03-131-2/+10
|/
* netfilter: nft_masq: support port rangePablo Neira Ayuso2016-03-021-1/+6
* netfilter: xtables: don't hook tables by defaultFlorian Westphal2016-03-028-96/+180
* netfilter: xtables: prepare for on-demand hook registerFlorian Westphal2016-03-028-46/+55
* netfilter: nf_defrag_ipv4: Drop redundant ip_send_check()Joe Stringer2016-03-021-3/+1
* ipv4: Namespaceify ip_default_ttl sysctl knobNikolay Borisov2016-02-161-1/+2
* inet: frag: Always orphan skbs inside ip_defrag()Joe Stringer2016-01-281-2/+0
* netfilter: nf_tables: release objects on netns destructionPablo Neira Ayuso2015-12-282-2/+2
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2015-12-181-1/+0
|\
| * netfilter: remove duplicate includestephen hemminger2015-11-231-1/+0
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2015-12-171-0/+1
|\ \
| * | netfilter: nf_dup: add missing dependencies with NF_CONNTRACKPablo Neira Ayuso2015-12-101-0/+1
* | | net: Eliminate NETIF_F_GEN_CSUM and NETIF_F_V[46]_CSUMTom Herbert2015-12-151-1/+2
| |/ |/|
* | net ipv4: use preferred log methodsBastian Stender2015-11-183-15/+15
|/
* netfilter: Fix removal of GRE expectation entries created by PPTPAnthony Lineham2015-11-091-1/+1
* ipv4: use sk_fullsock() in ipv4_conntrack_defrag()Eric Dumazet2015-11-051-3/+2
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2015-10-242-3/+2
|\
| * netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverselucien2015-10-121-3/+1