summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2016-09-0626-923/+1186
|\
| * netfilter: log: Check param to avoid overflow in nf_log_setGao Feng2016-08-301-3/+5
| * netfilter: remove __nf_ct_kill_acct helperFlorian Westphal2016-08-301-7/+5
| * netfilter: conntrack: resched gc again if eviction rate is highFlorian Westphal2016-08-301-0/+6
| * netfilter: conntrack: add gc worker to remove timed-out entriesFlorian Westphal2016-08-301-0/+76
| * netfilter: evict stale entries on netlink dumpsFlorian Westphal2016-08-301-1/+24
| * netfilter: conntrack: get rid of conntrack timerFlorian Westphal2016-08-304-58/+56
| * netfilter: don't rely on DYING bit to detect when destroy event was sentFlorian Westphal2016-08-301-8/+14
| * netfilter: restart search if moved to other chainFlorian Westphal2016-08-301-0/+7
| * netfilter: nf_tables: Use nla_put_be32() to dump immediate parametersPablo Neira Ayuso2016-08-262-5/+5
| * netfilter: nf_tables: honor NLM_F_EXCL flag in set element insertionPablo Neira Ayuso2016-08-263-13/+36
| * netfilter: nf_tables: reject hook configuration updates on existing chainsPablo Neira Ayuso2016-08-231-0/+31
| * netfilter: nf_tables: introduce nft_chain_parse_hook()Pablo Neira Ayuso2016-08-231-63/+89
| * netfilter: nft_hash: fix non static symbol warningWei Yongjun2016-08-221-1/+1
| * netfilter: fix spelling mistake: "delimitter" -> "delimiter"Colin Ian King2016-08-221-1/+1
| * netfilter: nf_tables: add number generator expressionLaura Garcia Liebana2016-08-223-0/+199
| * netfilter: nf_tables: add quota expressionPablo Neira Ayuso2016-08-223-0/+128
| * netfilter: nf_conntrack: restore nf_conntrack_htable_size as exported symbolPablo Neira Ayuso2016-08-181-0/+2
| * netfilter: conntrack: simplify the code by using nf_conntrack_get_htLiping Zhang2016-08-181-36/+10
| * netfilter: remove ip_conntrack* sysctl compat codePablo Neira Ayuso2016-08-136-378/+6
| * netfilter: nf_tables: add hash expressionLaura Garcia Liebana2016-08-123-0/+143
| * netfilter: nf_tables: rename set implementationsPablo Neira Ayuso2016-08-124-4/+4
| * ipvs: use nf_ct_kill helperFlorian Westphal2016-08-121-5/+2
| * netfilter: use_nf_conn_expires helper in more placesFlorian Westphal2016-08-123-9/+3
| * netfilter: physdev: add missed blankHangbin Liu2016-08-121-2/+2
| * netfilter: conntrack: Only need first 4 bytes to get l4proto portsGao Feng2016-08-125-8/+10
* | netfilter: cttimeout: fix use after free error when delete netnsLiping Zhang2016-08-181-6/+10
* | netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroyLiping Zhang2016-08-181-4/+4
* | netfilter: tproxy: properly refcount tcp listenersEric Dumazet2016-08-181-0/+4
* | netfilter: nfnetlink_acct: report overquota to the right netnsLiping Zhang2016-08-182-5/+6
* | netfilter: nfnetlink_log: add "nf-logger-3-1" module alias nameLiping Zhang2016-08-171-0/+1
* | netfilter: conntrack: do not dump other netns's conntrack entries via procLiping Zhang2016-08-171-0/+4
* | netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana2016-08-101-2/+9
* | netfilter: ctnetlink: reject new conntrack request with different l4protoLiping Zhang2016-08-091-0/+2
* | netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang2016-08-091-4/+2
* | netfilter: nfnetlink_queue: fix memory leak when attach expectation successfullyLiping Zhang2016-08-091-6/+2
* | netfilter: nf_ct_expect: remove the redundant slash when policy name is emptyLiping Zhang2016-08-091-1/+1
* | netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeqChristophe Leroy2016-08-081-2/+2
* | netfilter: nft_rbtree: ignore inactive matching element with no descendantsPablo Neira Ayuso2016-08-081-4/+6
* | netfilter: nf_ct_h323: do not re-activate already expired timerLiping Zhang2016-08-081-1/+2
|/
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2016-07-2736-808/+1009
|\
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2016-07-2426-488/+589
| |\
| | * netfilter: nft_compat: fix crash when related match/target module is removedLiping Zhang2016-07-231-23/+20
| | * netfilter: nft_compat: put back match/target module if init failLiping Zhang2016-07-231-8/+24
| | * netfilter: h323: Use mod_timer instead of set_expect_timeoutGao Feng2016-07-231-14/+1
| | * netfilter: connlabels: move set helper to xt_connlabelFlorian Westphal2016-07-222-30/+16
| | * netfilter: conntrack: support a fixed size of 128 distinct labelsFlorian Westphal2016-07-224-26/+12
| | * netfilter: nf_tables: allow to filter out rules by table and chainPablo Neira Ayuso2016-07-211-0/+38
| | * netfilter: nft_log: fix snaplen does not truncate packetsLiping Zhang2016-07-211-1/+2
| | * netfilter: nft_log: check the validity of log levelLiping Zhang2016-07-211-0/+5