summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)AuthorFilesLines
2017-03-13netfilter: nf_tables: fix mismatch in big-endian systemLiping Zhang2-8/+8
2017-03-01ipv6: orphan skbs in reassembly unitEric Dumazet1-0/+1
2017-02-27lib/vsprintf.c: remove %Z supportAlexey Dobriyan1-1/+1
2017-02-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller7-39/+28
2017-02-02netfilter: allow logging from non-init namespacesMichal Kubeček1-1/+1
2017-02-02netfilter: merge ctinfo into nfct pointer storage areaFlorian Westphal1-1/+1
2017-02-02netfilter: add and use nf_ct_set helperFlorian Westphal3-8/+4
2017-02-02skbuff: add and use skb_nfct helperFlorian Westphal3-8/+8
2017-02-02netfilter: reset netfilter state when duplicating packetFlorian Westphal1-1/+1
2017-02-02netfilter: conntrack: no need to pass ctinfo to error handlerFlorian Westphal1-6/+6
2017-01-16netfilter: rpfilter: fix incorrect loopback packet judgmentLiping Zhang2-13/+8
2017-01-09netfilter: use fwmark_reflect in nf_send_resetPau Espin Pedrol1-0/+3
2017-01-09xtables: extend matches and targets with .usersizeWillem de Bruijn1-0/+2
2017-01-09ip6tables: use match, target and data copy_to_user helpersWillem de Bruijn1-15/+6
2016-12-24Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds1-1/+1
2016-12-06netfilter: nft_fib: convert htonl to ntohl properlyLiping Zhang1-1/+1
2016-12-06netfilter: x_tables: pack percpu counter allocationsFlorian Westphal1-3/+6
2016-12-06netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal1-4/+1
2016-12-06netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal1-3/+2
2016-12-06netfilter: defrag: only register defrag functionality if neededFlorian Westphal2-5/+44
2016-12-04netfilter: conntrack: register hooks in netns when needed by rulesetFlorian Westphal1-12/+42
2016-12-04netfilter: nf_tables: add conntrack dependencies for nat/masq/redir expressionsFlorian Westphal2-0/+14
2016-12-04netfilter: add and use nf_ct_netns_get/putFlorian Westphal1-2/+2
2016-12-04netfilter: conntrack: built-in support for UDPliteDavide Caratti1-0/+3
2016-12-04netfilter: conntrack: built-in support for SCTPDavide Caratti1-0/+3
2016-12-04netfilter: conntrack: built-in support for DCCPDavide Caratti1-0/+3
2016-12-04netfilter: update Arturo Borrero Gonzalez email addressArturo Borrero Gonzalez2-4/+4
2016-12-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-3/+4
2016-11-29netfilter: ipv6: nf_defrag: drop mangled skb on ream errorFlorian Westphal2-3/+3
2016-11-24netfilter: Update nf_send_reset6 to consider L3 domainDavid Ahern1-0/+1
2016-11-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+4
2016-11-13netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL testJulia Lawall1-10/+10
2016-11-09netfilter: conntrack: simplify init/uninit of L4 protocol trackersDavide Caratti1-54/+24
2016-11-03netfilter: nf_tables: use hook state from xt_action_param structurePablo Neira Ayuso5-14/+16
2016-11-03netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso5-18/+20
2016-11-01netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.cPablo Neira Ayuso3-0/+159
2016-11-01netfilter: nf_tables: add fib expressionFlorian Westphal3-0/+284
2016-10-31netfilter: nft_dup: do not use sreg_dev if the user doesn't specify itLiping Zhang1-2/+4
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso2-3/+8
2016-09-25netfilter: nf_log: get rid of XT_LOG_* macrosLiping Zhang1-7/+7
2016-09-25netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang2-3/+3
2016-09-24netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole2-2/+2
2016-09-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+7
2016-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2016-09-12netfilter: Add the missed return value check of nft_register_chain_typeGao Feng1-1/+4
2016-09-12netfilter: nf_tables: don't drop IPv6 packets that cannot parse transportPablo Neira Ayuso2-6/+2
2016-09-06netfilter: nft_chain_route: re-route before skb is queued to userspaceLiping Zhang1-3/+7
2016-08-30netfilter: log: Check param to avoid overflow in nf_log_setGao Feng1-2/+1
2016-08-25netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang1-0/+1
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal1-21/+24