summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)AuthorFilesLines
2018-08-28netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal1-0/+1
2018-08-28netfilter: ipv6: nf_defrag: reduce struct net memory wasteEric Dumazet1-3/+3
2018-07-22netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+1
2018-03-18netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pktFlorian Westphal1-0/+4
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni1-6/+12
2017-02-08netfilter: Fix switch statement warnings with recent gcc.David Miller1-0/+2
2016-08-03netfilter: x_tables: speed up jump target validationFlorian Westphal1-21/+24
2016-07-12netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal1-44/+5
2016-07-12netfilter: x_tables: do compat validation via translate_tableFlorian Westphal1-123/+22
2016-07-12netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal1-18/+9
2016-07-12netfilter: ip6_tables: simplify translate_compat_table argsFlorian Westphal1-36/+25
2016-07-12netfilter: x_tables: check for bogus target offsetFlorian Westphal1-2/+3
2016-07-12netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal1-1/+2
2016-07-12netfilter: x_tables: kill check_entry helperFlorian Westphal1-12/+8
2016-07-12netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal1-11/+1
2016-07-12netfilter: x_tables: validate targets of jumpsFlorian Westphal1-0/+16
2016-07-12netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal1-0/+4
2016-07-12netfilter: x_tables: fix unconditional helperFlorian Westphal1-12/+11
2016-07-12netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal1-2/+4
2016-07-12netfilter: x_tables: validate e->target_offset earlyFlorian Westphal1-9/+8
2015-12-14ipv6: distinguish frag queues by device for multicast and link-local packetsMichal Kubeček1-2/+3
2014-11-10netfilter: nft_masq: fix uninitialized range in nft_masq_{ipv4, ipv6}_evalDaniel Borkmann1-0/+1
2014-10-31netfilter: nf_reject_ipv6: split nf_send_reset6() in smaller functionsPablo Neira Ayuso1-66/+109
2014-10-13netfilter: nf_tables: restrict nat/masq expressions to nat chain typePablo Neira Ayuso1-0/+1
2014-10-11netfilter: missing module license in the nf_reject_ipvX modulesPablo Neira Ayuso1-0/+4
2014-10-03netfilter: nft_masq: register/unregister notifiers on module init/exitArturo Borrero1-23/+11
2014-10-02netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)Pablo Neira Ayuso1-1/+1
2014-10-02netfilter: move nf_send_resetX() code to nf_reject_ipvX modulesPablo Neira Ayuso3-0/+172
2014-09-12netfilter: masquerading needs to be independent of x_tables in KconfigPablo Neira Ayuso1-12/+15
2014-09-12netfilter: NFT_CHAIN_NAT_IPV* is independent of NFT_NATPablo Neira Ayuso1-10/+13
2014-09-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller8-398/+499
2014-09-09netfilter: nf_tables: add new nft_masq expressionArturo Borrero3-0/+96
2014-09-09netfilter: nf_nat: generalize IPv6 masquerading support for nf_tablesArturo Borrero4-71/+133
2014-09-09netfilter: nft_chain_nat_ipv6: use generic IPv6 NAT code from corePablo Neira Ayuso1-127/+36
2014-09-09netfilter: nat: move specific NAT IPv6 to corePablo Neira Ayuso3-204/+238
2014-09-03netfilter: fix missing dependencies in NETFILTER_XT_TARGET_LOGPablo Neira1-1/+1
2014-08-18netfilter: move NAT Kconfig switches out of the iptables scopePablo Neira Ayuso2-8/+20
2014-08-03inet: frags: use kmem_cache for inet_frag_queueNikolay Aleksandrov1-2/+6
2014-08-03inet: frags: rename last_in to flagsNikolay Aleksandrov1-6/+6
2014-07-28inet: frag: set limits and make init_net's high_thresh limit globalNikolay Aleksandrov1-2/+10
2014-07-28inet: frag: use seqlock for hash rebuildFlorian Westphal1-1/+1
2014-07-28inet: frag: remove periodic secret rebuild timerFlorian Westphal1-1/+0
2014-07-28inet: frag: remove lru listFlorian Westphal1-1/+0
2014-07-28inet: frag: move evictor calls into frag_find functionFlorian Westphal1-4/+0
2014-07-28inet: frag: remove hash size assumptions from callersFlorian Westphal1-5/+2
2014-07-28inet: frag: constify match, hashfn and constructor argumentsFlorian Westphal1-1/+1
2014-07-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller4-0/+429
2014-07-16netfilter: remove unnecessary break after returnFabian Frederick1-1/+0
2014-06-30netfilter: use IS_ENABLED() macroDuan Jiong1-0/+4
2014-06-28netfilter: fix several Kconfig problems in NF_LOG_*Pablo Neira Ayuso1-5/+5