summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)Author
2018-06-16netfilter: ipt_CLUSTERIP: fix a refcount bug in clusterip_config_find_get()Cong Wang
2018-06-16netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni
2018-06-16netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()Dmitry Vyukov
2017-11-11netfilter: Fix switch statement warnings with recent gcc.David Miller
2017-11-11netfilter: ipt_CLUSTERIP: fix use-after-free of proc entrySabrina Dubroca
2017-07-18netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to registerGao Feng
2017-03-16netfilter: rpfilter: fix incorrect loopback packet judgmentLiping Zhang
2017-02-23netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in...Hongxu Jia
2016-11-20netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-11-20netfilter: x_tables: validate targets of jumpsFlorian Westphal
2016-08-22netfilter: ensure number of counters is >0 in do_replace()Dave Jones
2016-08-22netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-08-22netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-08-22netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-08-22netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal
2016-08-22netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal
2016-08-22netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-08-22netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-08-22netfilter: x_tables: kill check_entry helperFlorian Westphal
2016-08-22netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-08-22netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal
2016-05-01netfilter: x_tables: fix unconditional helperFlorian Westphal
2016-05-01netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal
2016-05-01netfilter: x_tables: validate e->target_offset earlyFlorian Westphal
2016-03-29ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller
2015-12-18netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverselucien
2014-05-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2014-05-12net: rename local_df to ignore_dfWANG Cong
2014-05-04netfilter: ipv4: defrag: set local_df flag on defragmented skbFlorian Westphal
2014-04-29netfilter: add helper for adding nat extensionFlorian Westphal
2014-04-16ipv4, fib: pass LOOPBACK_IFINDEX instead of 0 to flowi4_iifCong Wang
2014-04-05netfilter: Can't fail and free after table replacementThomas Graf
2014-02-14netfilter: nf_nat_snmp_basic: fix duplicates in if/else branchesFX Le Bail
2014-02-06netfilter: nf_tables: add reject module for NFPROTO_INETPatrick McHardy
2014-02-06netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc partsPatrick McHardy
2014-02-05netfilter: nf_nat_h323: fix crash in nf_ct_unlink_expect_report()Alexey Dobriyan
2014-01-09netfilter: nf_tables: fix error path in the init functionsPablo Neira Ayuso
2014-01-09netfilter: nf_tables: rename nft_do_chain_pktinfo() to nft_do_chain()Patrick McHardy
2014-01-09netfilter: nf_tables: minor nf_chain_type cleanupsPatrick McHardy
2014-01-09netfilter: nf_tables: constify chain type definitions and pointersPatrick McHardy
2014-01-09netfilter: nf_tables: add missing module references to chain typesPatrick McHardy
2014-01-07netfilter: nf_tables: add "inet" table for IPv4/IPv6Patrick McHardy
2014-01-07netfilter: nf_tables: add support for multi family tablesPatrick McHardy
2014-01-07netfilter: nf_tables: make chain types override the default AF functionsPatrick McHardy
2014-01-06Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller
2014-01-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2014-01-03netfilter: nf_conntrack: remove dead codestephen hemminger
2014-01-01netfilter: add help information to new nf_tables Kconfig optionsPablo Neira Ayuso
2013-12-30netfilter: nft_reject: support for IPv6 and TCP resetEric Leblond
2013-12-30netfilter: REJECT: separate reusable codeEric Leblond
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-12 22:44:25 +0000