summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'ipvs-for-v4.4' of https://git.kernel.org/pub/scm/linux/kernel/git/...Pablo Neira Ayuso2015-09-1811-190/+325
|\
| * ipvs: add sysctl to ignore tunneled packetsAlex Gartrell2015-09-172-1/+16
| * ipvs: support scheduling inverse and icmp SCTP packetsAlex Gartrell2015-09-011-17/+23
| * ipvs: support scheduling inverse and icmp UDP packetsAlex Gartrell2015-09-011-9/+18
| * ipvs: support scheduling inverse and icmp TCP packetsAlex Gartrell2015-09-011-11/+28
| * ipvs: ensure that ICMP cannot be sent in reply to ICMPAlex Gartrell2015-09-011-2/+3
| * ipvs: attempt to schedule icmp packetsAlex Gartrell2015-09-014-9/+55
| * ipvs: sh: support scheduling icmp/inverse packets consistentlyAlex Gartrell2015-09-011-24/+21
| * ipvs: Use outer header in ip_vs_bypass_xmit_v6Alex Gartrell2015-09-011-1/+3
| * ipvs: add schedule_icmp sysctlAlex Gartrell2015-09-011-1/+7
| * ipvs: Make ip_vs_schedule aware of inverse iph'esAlex Gartrell2015-09-011-14/+36
| * ipvs: drop inverse argument to conn_{in,out}_getAlex Gartrell2015-09-014-29/+33
| * ipvs: pull out ip_vs_try_to_schedule functionAlex Gartrell2015-09-011-21/+39
| * ipvs: Handle inverse and icmp headers in ip_vs_leaveAlex Gartrell2015-09-011-12/+21
| * ipvs: Add hdr_flags to iphdrAlex Gartrell2015-09-013-12/+12
| * ipvs: replace ip_vs_fill_ip4hdr with ip_vs_fill_iph_skb_offAlex Gartrell2015-09-012-51/+34
* | netfilter: Pass net into okfnEric W. Biederman2015-09-172-3/+3
* | netfilter: Use nf_hook_state.netEric W. Biederman2015-09-171-2/+1
* | netfilter: Pass struct net into the netfilter hooksEric W. Biederman2015-09-171-2/+2
* | net: Merge dst_output and dst_output_skEric W. Biederman2015-09-171-2/+2
* | netlink, mmap: fix edge-case leakages in nf queue zero-copyDaniel Borkmann2015-09-091-2/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2015-09-057-12/+55
|\ \
| * | netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error pathsDaniel Borkmann2015-09-013-3/+4
| * | netfilter: nfnetlink: work around wrong endianess in res_id fieldPablo Neira Ayuso2015-08-291-1/+7
| * | netfilter: ipset: Fixing unnamed union initElad Raz2015-08-292-4/+36
| * | netfilter: ipset: Out of bound access in hash:net* types fixedJozsef Kadlecsik2015-08-281-4/+8
* | | netfilter: nf_conntrack: make nf_ct_zone_dflt built-inDaniel Borkmann2015-09-022-7/+6
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2015-08-288-136/+387
|\ \ \ | | |/ | |/|
| * | netfilter: reduce sparse warningsFlorian Westphal2015-08-282-6/+3
| * | Merge tag 'ipvs2-for-v4.3' of https://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso2015-08-265-128/+382
| |\ \
| | * | ipvs: add more mcast parameters for the sync daemonJulian Anastasov2015-08-212-24/+164
| | * | ipvs: add sync_maxlen parameter for the sync daemonJulian Anastasov2015-08-212-94/+96
| | * | ipvs: call rtnl_lock earlyJulian Anastasov2015-08-212-19/+33
| | * | ipvs: Add ovf schedulerRaducu Deaconu2015-08-213-0/+98
| * | | netfilter: xt_TEE: use IS_ENABLED(CONFIG_NF_DUP_IPV6)Pablo Neira Ayuso2015-08-211-2/+2
| |/ /
* | | netfilter: connlabels: Export setting connlabel lengthJoe Stringer2015-08-272-12/+36
* | | netfilter: Always export nf_connlabels_replace()Joe Stringer2015-08-271-2/+0
|/ /
* | Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso2015-08-2110-23/+21
|\ \
| * | net: Change pseudohdr argument of inet_proto_csum_replace* to be a boolTom Herbert2015-08-178-14/+15
| * | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2015-08-133-10/+7
| |\|
| | * netfilter: conntrack: Use flags in nf_ct_tmpl_alloc()Joe Stringer2015-08-051-2/+2
| | * netfilter: nf_conntrack: checking for IS_ERR() instead of NULLDan Carpenter2015-07-302-5/+4
| | * netfilter: nf_conntrack: silence warning on falling back to vmalloc()Pablo Neira Ayuso2015-07-301-3/+1
* | | netfilter: nft_payload: work around vlan header strippingFlorian Westphal2015-08-191-1/+56
* | | netfilter: nf_conntrack: add efficient mark to zone mappingDaniel Borkmann2015-08-183-38/+22
* | | netfilter: nf_conntrack: add direction support for zonesDaniel Borkmann2015-08-186-88/+210
* | | netfilter: nf_conntrack: push zone object into functionsDaniel Borkmann2015-08-1110-97/+143
* | | netfilter: nfacct: per network namespace supportAndreas Schultz2015-08-072-22/+51
* | | netfilter: nft_limit: add per-byte limitingPablo Neira Ayuso2015-08-071-4/+59
* | | netfilter: nft_limit: constant token cost per packetPablo Neira Ayuso2015-08-071-7/+18