summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2016-07-21netfilter: nft_log: fix possible memory leak if log expr init failLiping Zhang
2016-07-21netfilter: Add helper array register/unregister functionsGao Feng
2016-07-19netfilter: nft_ct: fix unpaired nf_connlabels_get/put callLiping Zhang
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-07-12netfilter: conntrack: protect early_drop by rcu read lockLiping Zhang
2016-07-11netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931Toby DiPasquale
2016-07-11Merge tag 'ipvs-for-v4.8' of https://git.kernel.org/pub/scm/linux/kernel/git/...Pablo Neira Ayuso
2016-07-11netfilter: nf_tables: get rid of possible_net_t from set and basechainPablo Neira Ayuso
2016-07-11netfilter: nft_ct: make byte/packet expr more friendlyLiping Zhang
2016-07-11netfilter: physdev: physdev-is-out should not work with OUTPUT chainHangbin Liu
2016-07-11netfilter: nat: convert nat bysrc hash to rhashtableFlorian Westphal
2016-07-11netfilter: move nat hlist_head to nf_connFlorian Westphal
2016-07-11netfilter: conntrack: simplify early_dropFlorian Westphal
2016-07-11netfilter: nf_ct_helper: unlink helper again when hash resize happenLiping Zhang
2016-07-11netfilter: cttimeout: unlink timeout obj again when hash resize happenLiping Zhang
2016-07-11netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang
2016-07-07ipvs: count pre-established TCP states as activeMichal Kubecek
2016-07-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2016-07-05netfilter: nf_log: fix error on write NONE to logger choice sysctlPavel Tikhomirov
2016-07-04net: simplify and make pkt_type_ok() available for other usersJamal Hadi Salim
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches
2016-07-01netfilter: Remove references to obsolete CONFIG_IP_ROUTE_FWMARKMoritz Sichert
2016-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2016-06-24netfilter: nf_tables: add support for inverted logic in nft_lookupArturo Borrero
2016-06-24netfilter: nf_tables: get rid of NFT_BASECHAIN_DISABLEDPablo Neira Ayuso
2016-06-24netfilter: conntrack: allow increasing bucket size via sysctl tooFlorian Westphal
2016-06-24netfilter: nft_hash: support deletion of inactive elementsPablo Neira Ayuso
2016-06-24netfilter: nft_rbtree: check for next generation when deactivating elementsPablo Neira Ayuso
2016-06-24netfilter: nf_tables: add generation mask to setsPablo Neira Ayuso
2016-06-24netfilter: nf_tables: add generation mask to chainsPablo Neira Ayuso
2016-06-24netfilter: nf_tables: add generation mask to tablesPablo Neira Ayuso
2016-06-24netfilter: nf_tables: add generic macros to check for generation maskPablo Neira Ayuso
2016-06-24netfilter: xt_NFLOG: nflog-range does not truncate packetsVishwanath Pai
2016-06-23netfilter: Allow xt_owner in any user namespaceEric W. Biederman
2016-06-23netfilter: move zone info into struct nf_connFlorian Westphal
2016-06-23netfilter: nf_log: Remove NULL checkShivani Bhardwaj
2016-06-23netfilter: conntrack: align nf_conn on cacheline boundaryFlorian Westphal
2016-06-23netfilter: xt_TRACE: add explicitly nf_logger_find_get callLiping Zhang
2016-06-23netfilter: nf_log: handle NFPROTO_INET properly in nf_logger_[find_get|put]Liping Zhang
2016-06-23netfilter: x_tables: fix possible ZERO_SIZE_PTR pointer dereferencing error.Xiubo Li
2016-06-15netfilter: nf_tables: fix a wrong check to skip the inactive rulesLiping Zhang
2016-06-15netfilter: nf_tables: fix wrong destroy anonymous sets if binding failsLiping Zhang
2016-06-15netfilter: nf_tables: reject loops from set element jump to chainPablo Neira Ayuso
2016-06-15netfilter: nf_tables: fix wrong check of NFT_SET_MAP in nf_tables_bind_setLiping Zhang
2016-06-15netfilter: conntrack: destroy kmemcache on module removalFlorian Westphal
2016-06-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2016-06-07net: sched: do not acquire qdisc spinlock in qdisc/class stats dumpEric Dumazet
2016-06-07netfilter: helper: avoid extra expectation iterations on unregisterFlorian Westphal
2016-06-06ipvs: update real-server binding of outgoing connections in SIP-peMarco Angaroni
2016-06-02netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal