summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'Shmulik Ladkani2017-10-091-2/+20
* netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_...Eric Dumazet2017-10-061-2/+2
* netfilter: nf_tables: do not dump chain counters if not enabledPablo Neira Ayuso2017-10-061-1/+1
* netfilter: nf_tables: Release memory obtained by kasprintfArvind Yadav2017-10-031-1/+3
* netfilter: nf_tables: fix update chain errorJingPiao Chen2017-09-291-2/+2
* netfilter: ipset: Fix race between dump and swapRoss Lagerwall2017-09-291-2/+5
* netfilter: ipset: pernet ops must be unregistered lastFlorian Westphal2017-09-261-9/+13
* netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addressesJozsef Kadlecsik2017-09-2610-22/+24
* netfilter: xt_socket: Restore mark from full sockets onlySubash Abhinov Kasiviswanathan2017-09-261-2/+2
* netfilter: ipvs: full-functionality option for ECN encapsulation in tunnelVadim Fedorenko2017-09-261-2/+6
* netfilter: ipset: ipset list may return wrong member count for set with timeoutVishwanath Pai2017-09-181-1/+13
* netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero divGeert Uytterhoeven2017-09-181-6/+6
* netfilter: xt_hashlimit: fix build error caused by 64bit divisionVishwanath Pai2017-09-081-5/+7
* netfilter: xt_hashlimit: alloc hashtable with right sizeZhizhou Tian2017-09-081-2/+2
* netfilter: core: remove erroneous warn_onFlorian Westphal2017-09-081-1/+1
* netfilter: nat: use keyed locksFlorian Westphal2017-09-081-12/+24
* netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"Florian Westphal2017-09-081-77/+53
* netfilter: nf_nat: don't bug when mapping already existsFlorian Westphal2017-09-081-1/+3
* netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_scheduleXin Long2017-09-081-1/+2
* netfilter: ipvs: fix the issue that sctp_conn_schedule drops non-INIT packetXin Long2017-09-081-2/+5
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2017-09-0659-880/+1898
|\
| * netfilter: nf_tables: support for recursive chain deletionPablo Neira Ayuso2017-09-041-1/+23
| * netfilter: nf_tables: use NLM_F_NONREC for deletion requestsPablo Neira Ayuso2017-09-041-1/+7
| * netfilter: nf_tables: add nf_tables_addchain()Pablo Neira Ayuso2017-09-041-93/+106
| * netfilter: nf_tables: add nf_tables_updchain()Pablo Neira Ayuso2017-09-041-78/+92
| * net: Replace NF_CT_ASSERT() with WARN_ON().Varsha Rao2017-09-048-31/+30
| * netfilter: remove unused hooknum arg from packet functionsFlorian Westphal2017-09-047-7/+2
| * netfilter: nft_limit: add stateful object typePablo M. Bermudo Garay2017-09-041-1/+121
| * netfilter: nft_limit: replace pkt_bytes with bytesPablo M. Bermudo Garay2017-09-041-13/+13
| * netfilter: nf_tables: add select_ops for stateful objectsPablo M. Bermudo Garay2017-09-045-35/+66
| * netfilter: xt_hashlimit: add rate match modeVishwanath Pai2017-09-041-24/+253
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2017-09-0348-617/+1206
| |\
| | * netfilter: rt: account for tcp header size tooFlorian Westphal2017-08-281-1/+2
| | * netfilter: conntrack: remove unused code in nf_conntrack_proto_generic.cDavide Caratti2017-08-281-12/+0
| | * netfilter: Remove NFDEBUG()Varsha Rao2017-08-282-7/+1
| | * netfilter: core: batch nf_unregister_net_hooks synchronize_net callsFlorian Westphal2017-08-281-3/+56
| | * netfilter: debug: check for sorted arrayFlorian Westphal2017-08-281-0/+23
| | * netfilter: convert hook list to an arrayAaron Conole2017-08-283-99/+268
| | * netfilter: fix a few (harmless) sparse warningsFlorian Westphal2017-08-283-5/+5
| | * netfilter: conntrack: make protocol tracker pointers constFlorian Westphal2017-08-245-35/+35
| | * netfilter: conntrack: print_conntrack only needed if CONFIG_NF_CONNTRACK_PROCFSFlorian Westphal2017-08-244-0/+22
| | * netfilter: conntrack: place print_tuple in procfs partFlorian Westphal2017-08-248-70/+56
| | * netfilter: conntrack: remove protocol name from l4proto structFlorian Westphal2017-08-248-17/+20
| | * netfilter: conntrack: remove protocol name from l3proto structFlorian Westphal2017-08-242-2/+11
| | * netfilter: conntrack: compute l3proto nla size at compile timeFlorian Westphal2017-08-242-7/+5
| | * netfilter: rt: add support to fetch path mssFlorian Westphal2017-08-191-0/+66
| | * netfilter: exthdr: tcp option set supportFlorian Westphal2017-08-191-2/+162
| | * netfilter: exthdr: split netlink dump functionFlorian Westphal2017-08-191-5/+11
| | * netfilter: exthdr: factor out tcp option accessFlorian Westphal2017-08-191-12/+21
| | * netfilter: use audit_log()Geliang Tang2017-08-191-10/+4