summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2015-06-14netfilter: ipset: Make sure listing doesn't grab a set which is just being de...Jozsef Kadlecsik1-15/+34
2015-06-14netfilter: ipset: Fix parallel resizing and listing of the same setJozsef Kadlecsik2-15/+58
2015-06-14netfilter: ipset: Fix cidr handling for hash:*net* typesJozsef Kadlecsik7-34/+42
2015-06-14netfilter: ipset: Check CIDR value only when attribute is givenSergey Popovich4-49/+41
2015-06-14netfilter: ipset: Make sure we always return line number on batchSergey Popovich15-75/+75
2015-06-14netfilter: ipset: Permit CIDR equal to the host address CIDR in IPv6Sergey Popovich5-15/+43
2015-06-14netfilter: ipset: Check extensions attributes before getting extensions.Sergey Popovich16-170/+29
2015-06-14netfilter: ipset: Use SET_WITH_*() helpers to test set extensionsSergey Popovich2-7/+7
2015-06-12netfilter: xtables: avoid percpu ruleset duplicationFlorian Westphal1-15/+8
2015-06-12netfilter: conntrack: warn the user if there is a better helper to useMarcelo Ricardo Leitner1-1/+7
2015-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller4-5/+231
2015-05-26netfilter: nf_tables: add netdev table to filter from ingressPablo Neira Ayuso3-0/+189
2015-05-26netfilter: nf_tables: allow to bind table to net_devicePablo Neira Ayuso1-5/+41
2015-05-26netfilter: default CONFIG_NETFILTER_INGRESS to yPablo Neira Ayuso1-0/+1
2015-05-25ipv6: Set FLOWI_FLAG_KNOWN_NH at flowi6_flagsMartin KaFai Lau2-4/+10
2015-05-25ipv6: Add rt6_get_cookie() functionMartin KaFai Lau1-1/+1
2015-05-25ipv6: Remove external dependency on rt6i_gateway and RTF_ANYCASTMartin KaFai Lau2-3/+3
2015-05-25ipv6: Remove external dependency on rt6i_dst and rt6i_srcMartin KaFai Lau1-2/+2
2015-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller6-23/+58
2015-05-20netfilter: nfnetlink_{log,queue}: Register pernet in first placeFrancesco Ruggeri2-18/+19
2015-05-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller24-231/+307
2015-05-17netfilter: Use correct return for seq_show functionsJoe Perches2-13/+7
2015-05-15netfilter: nf_tables: fix bogus warning in nft_data_uninit()Mirek Kratochvil1-2/+2
2015-05-15conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transitionJesper Dangaard Brouer1-3/+32
2015-05-15netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=mFlorian Westphal1-0/+2
2015-05-15netfilter: x_tables: add context to know if extension runs from nft_compatPablo Neira Ayuso2-0/+8
2015-05-14netfilter: xt_MARK: Add ARP supportZhang Chunyu1-0/+1
2015-05-14netfilter: ipset: deinline ip_set_put_extensions()Denys Vlasenko1-0/+25
2015-05-14netfilter: add netfilter ingress hook after handle_ing() under unique static keyPablo Neira2-1/+37
2015-05-14netfilter: add hook list to nf_hook_statePablo Neira1-4/+2
2015-05-13netfilter: ipset: Use better include files in xt_set.cJozsef Kadlecsik1-1/+2
2015-05-13netfilter: ipset: Improve preprocessor macros checksSergey Popovich3-7/+18
2015-05-13netfilter: ipset: Fix hashing for ipv6 setsSergey Popovich5-8/+2
2015-05-13netfilter: ipset: Check for comment netlink attribute lengthSergey Popovich15-15/+30
2015-05-13netfilter: ipset: Return bool values instead of intSergey Popovich10-38/+43
2015-05-13netfilter: ipset: Use HOST_MASK literal to represent host address CIDR lenSergey Popovich7-9/+11
2015-05-13netfilter: ipset: Check IPSET_ATTR_PORT only onceSergey Popovich5-40/+10
2015-05-13netfilter: ipset: Return ipset error instead of boolSergey Popovich12-48/+126
2015-05-13netfilter: ipset: Preprocessor directices cleanupSergey Popovich12-34/+4
2015-05-13netfilter: ipset: No need to make nomatch bitfieldSergey Popovich1-2/+2
2015-05-13netfilter: ipset: Properly calculate extensions offsets and total lengthSergey Popovich1-3/+3
2015-05-13netfilter: ipset: make ip_set_get_ip*_port to use skb_network_offsetAlexander Drozdov1-2/+4
2015-05-13netfilter: ipset: Give a better name to a macro in ip_set_core.cJozsef Kadlecsik1-9/+9
2015-05-13netfilter: ipset: Fix sparse warningJozsef Kadlecsik1-2/+2
2015-05-11net: Modify sk_alloc to not reference count the netns of kernel sockets.Eric W. Biederman1-21/+9
2015-05-11net: Add a struct net parameter to sock_create_kernEric W. Biederman1-2/+2
2015-05-08ipvs: fix memory leak in ip_vs_ctl.cTommi Rantala1-0/+3
2015-04-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-2/+1
2015-04-27netfilter; Add some missing default cases to switch statements in nft_reject.David S. Miller2-0/+4
2015-04-24netfilter: nf_tables: fix wrong length for jump/goto verdictsFlorian Westphal1-2/+1