summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2021-04-162-0/+4
* netfilter: rpfilter: mask ecn bits before fib lookupGuillaume Nault2021-01-301-1/+1
* netfilter: nf_conntrack_pptp: prevent buffer overflows in debug codePablo Neira Ayuso2020-06-031-5/+2
* netfilter: arp_tables: init netns pointer in xt_tgdtor_param structFlorian Westphal2020-01-231-9/+10
* netfilter: arp_tables: init netns pointer in xt_tgchk_param structFlorian Westphal2020-01-141-11/+16
* netfilter: nf_tables: fix mismatch in big-endian systemLiping Zhang2019-02-202-8/+8
* netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal2018-08-241-0/+1
* netfilter: x_tables: initialise match/target check parameter structFlorian Westphal2018-07-171-0/+1
* netfilter: nf_nat_h323: fix logical-not-parentheses warningNick Desaulniers2018-04-081-27/+30
* netfilter: x_tables: pack percpu counter allocationsFlorian Westphal2018-03-182-6/+12
* netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal2018-03-182-8/+2
* netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal2018-03-182-4/+4
* netfilter: add back stackpointer size checksFlorian Westphal2018-03-182-1/+10
* netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni2018-02-251-1/+5
* netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()Dmitry Vyukov2018-02-251-3/+13
* netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to registerGao Feng2017-12-251-18/+1
* netfilter: don't track fragmented packetsFlorian Westphal2017-12-142-5/+4
* netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang2017-10-081-0/+1
* netfilter: use fwmark_reflect in nf_send_resetPau Espin Pedrol2017-08-111-0/+2
* netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in...Hongxu Jia2016-11-301-2/+2
* netfilter: nft_dup: do not use sreg_dev if the user doesn't specify itLiping Zhang2016-10-311-2/+4
* Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso2016-09-252-4/+8
|\
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2016-09-231-4/+7
| |\
| | * netfilter: nft_chain_route: re-route before skb is queued to userspaceLiping Zhang2016-09-061-4/+7
| * | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2016-09-121-0/+1
| |\ \ | | |/
| | * netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang2016-08-251-0/+1
* | | netfilter: nf_log: get rid of XT_LOG_* macrosLiping Zhang2016-09-251-3/+3
* | | netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang2016-09-253-4/+4
* | | netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole2016-09-242-2/+2
* | | netfilter: Add the missed return value check of nft_register_chain_typeGao Feng2016-09-122-2/+8
* | | netfilter: nf_tables: ensure proper initialization of nft_pktinfo fieldsPablo Neira Ayuso2016-09-121-1/+1
* | | netfilter: gre: Use consistent GRE and PTTP header structure instead of the o...Gao Feng2016-09-071-6/+7
* | | netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfil...Gao Feng2016-09-071-2/+2
|/ /
* | netfilter: log: Check param to avoid overflow in nf_log_setGao Feng2016-08-302-4/+2
* | netfilter: log_arp: Use ARPHRD_ETHER instead of literal '1'Gao Feng2016-08-301-1/+1
* | netfilter: remove ip_conntrack* sysctl compat codePablo Neira Ayuso2016-08-135-615/+1
* | netfilter: use_nf_conn_expires helper in more placesFlorian Westphal2016-08-121-2/+1
* | netfilter: nf_dup4: remove redundant checksum recalculationLiping Zhang2016-08-121-6/+4
|/
* netfilter: x_tables: speed up jump target validationFlorian Westphal2016-07-182-43/+49
* netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang2016-07-111-4/+10
* netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches2016-07-032-32/+29
* netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso2016-07-011-4/+0
* netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCPLiping Zhang2016-06-241-0/+3
* netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal2016-05-061-4/+2
* netfilter: conntrack: check netns when walking expect hashFlorian Westphal2016-05-061-0/+3
* netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso2016-05-052-385/+76
* netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal2016-05-052-7/+5
* netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal2016-05-051-2/+6
* netfilter: conntrack: small refactoring of conntrack seq_printfFlorian Westphal2016-05-051-5/+19
* netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso2016-04-292-4/+8
View Lorry Controller Status