summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2017-05-10Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-4/+4
2017-05-08mm, vmalloc: use __GFP_HIGHMEM implicitlyMichal Hocko1-2/+1
2017-05-08treewide: use kv[mz]alloc* rather than opencoded variantsMichal Hocko2-21/+5
2017-05-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds10-58/+113
2017-05-03Merge branch 'stable-4.12' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds1-98/+28
2017-05-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller9-57/+112
2017-05-03netfilter: conntrack: Force inlining of build check to prevent build failureGeert Uytterhoeven1-1/+1
2017-05-03netfilter: nf_tables: check if same extensions are set when adding elementsPablo Neira Ayuso1-0/+5
2017-05-02audit: normalize NETFILTER_PKTRichard Guy Briggs1-97/+27
2017-05-02netfilter: use consistent ipv4 network offset in xt_AUDITRichard Guy Briggs1-1/+1
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller70-506/+533
2017-05-01netfilter: nf_ct_ext: invoke destroy even when ext is not attachedLiping Zhang1-6/+2
2017-05-01Merge tag 'ipvs3-for-v4.12' of http://git.kernel.org/pub/scm/linux/kernel/git...Pablo Neira Ayuso2-23/+1
2017-05-01netfilter: nf_queue: only call synchronize_net twice if nf_queue is activeFlorian Westphal4-22/+26
2017-05-01netfilter: nf_log: don't call synchronize_rcu in nf_log_unsetFlorian Westphal2-2/+1
2017-05-01netfilter: batch synchronize_net calls during hook unregisterFlorian Westphal1-6/+40
2017-04-28Merge tag 'ipvs-fixes-for-v4.11' of http://git.kernel.org/pub/scm/linux/kerne...Pablo Neira Ayuso1-5/+17
2017-04-28netfilter: x_tables: unlock on error in xt_find_table_lock()Dan Carpenter1-1/+3
2017-04-28ipvs: explicitly forbid ipv6 service/dest creation if ipv6 mod is disabledPaolo Abeni1-5/+17
2017-04-28ipvs: change comparison on sync_refresh_periodAaron Conole1-1/+1
2017-04-28ipvs: remove unused function ip_vs_set_state_timeoutAaron Conole1-22/+0
2017-04-26netfilter: don't attach a nat extension by defaultFlorian Westphal1-6/+0
2017-04-26netfilter: pptp: attach nat extension when neededFlorian Westphal1-2/+10
2017-04-26netfilter: conntrack: handle initial extension alloc via kreallocFlorian Westphal1-36/+15
2017-04-26netfilter: conntrack: mark extension structs as constFlorian Westphal8-9/+9
2017-04-26netfilter: conntrack: remove prealloc supportFlorian Westphal2-46/+4
2017-04-26ipvs: convert to use pernet nf_hook apiFlorian Westphal1-10/+9
2017-04-25netfilter: nft_dynset: continue to next expr if _OP_ADD succeededLiping Zhang1-3/+2
2017-04-24netfilter: xt_socket: Fix broken IPv6 handlingPeter Tirsek1-1/+1
2017-04-24netfilter: ctnetlink: acquire ct->lock before operating nf_ct_seqadjLiping Zhang1-6/+15
2017-04-24netfilter: ctnetlink: make it safer when updating ct->statusLiping Zhang1-9/+24
2017-04-24netfilter: ctnetlink: fix deadlock due to acquire _expect_lock twiceLiping Zhang1-12/+12
2017-04-24netfilter: ctnetlink: drop the incorrect cthelper module requestLiping Zhang1-16/+1
2017-04-24netfilter: nft_set_bitmap: free dummy elements when destroy the setLiping Zhang1-0/+5
2017-04-24netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlinkLiping Zhang1-5/+21
2017-04-24netfilter: xt_CT: fix refcnt leak on error pathGao Feng1-2/+9
2017-04-23Merge branch 'for-mingo' of git://git.kernel.org/pub/scm/linux/kernel/git/pau...Ingo Molnar1-4/+4
2017-04-19netfilter: tcp: Use TCP_MAX_WSCALE instead of literal 14Gao Feng2-6/+5
2017-04-19netfilter: ipvs: fix incorrect conflict resolutionFlorian Westphal1-1/+2
2017-04-19nefilter: eache: reduce struct size from 32 to 24 byteFlorian Westphal1-0/+3
2017-04-19netfilter: allow early drop of assured conntracksFlorian Westphal4-0/+99
2017-04-19netfilter: conntrack: use u8 for extension sizes againFlorian Westphal1-0/+33
2017-04-19netfilter: remove last traces of variable-sized extensionsFlorian Westphal1-9/+7
2017-04-19netfilter: helpers: remove data_len usage for inkernel helpersFlorian Westphal8-28/+13
2017-04-19netfilter: nfnetlink_cthelper: reject too large userspace allocation requestsFlorian Westphal1-2/+8
2017-04-19netfilter: helper: add build-time asserts for helper data sizeFlorian Westphal8-0/+16
2017-04-19netfilter: nft_ct: allow to set ctnetlink event types of a connectionFlorian Westphal1-1/+24
2017-04-18mm: Rename SLAB_DESTROY_BY_RCU to SLAB_TYPESAFE_BY_RCUPaul E. McKenney1-4/+4
2017-04-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller7-24/+61
2017-04-15netfilter: remove nf_ct_is_untrackedFlorian Westphal9-27/+13