summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)Author
2016-09-29net: disable fragment reassembly if high_thresh is set to zeroMichal Kubecek
2016-08-19netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-07-22netfilter: x_tables: validate targets of jumpsFlorian Westphal
2016-07-21netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-07-21netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-07-21netfilter: ensure number of counters is >0 in do_replace()Dave Jones
2016-07-21netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-07-21netfilter: ip6_tables: simplify translate_compat_table argsFlorian Westphal
2016-07-21netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-07-21netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-07-21netfilter: x_tables: kill check_entry helperFlorian Westphal
2016-07-21netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-07-18netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal
2016-04-23netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal
2016-04-21netfilter: x_tables: fix unconditional helperFlorian Westphal
2016-04-21netfilter: x_tables: validate e->target_offset earlyFlorian Westphal
2016-03-30ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller
2016-01-05netfilter: ip6t_SYNPROXY: fix NULL pointer dereferencePhil Sutter
2016-01-05ipv6: distinguish frag queues by device for multicast and link-local packetsMichal Kubeček
2014-05-29netfilter: Can't fail and free after table replacementThomas Graf
2013-12-08netfilter: push reasm skb through instead of original frag skbsJiri Pirko
2013-09-30netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packetsPatrick McHardy
2013-09-13netfilter: nf_nat_proto_icmpv6:: fix wrong comparison in icmpv6_manip_pktPhil Oester
2013-09-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds
2013-09-04netfilter: SYNPROXY: let unrelated packets continueJesper Dangaard Brouer
2013-09-04netfilter: more strict TCP flag matching in SYNPROXYJesper Dangaard Brouer
2013-08-28netfilter: add IPv6 SYNPROXY targetPatrick McHardy
2013-08-28netfilter: nf_conntrack: make sequence number adjustments usuable without NATPatrick McHardy
2013-08-28netfilter: nf_defrag_ipv6.o included twiceNathan Hintz
2013-08-28netfilter: ip[6]t_REJECT: tcp-reset using wrong MAC source if bridgedPhil Oester
2013-08-09netfilter: nf_conntrack: don't send destroy events from iteratorFlorian Westphal
2013-07-15PTR_RET is now PTR_ERR_OR_ZERO(): Replace most.Rusty Russell
2013-07-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2013-06-20netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handlingPhil Oester
2013-05-28net: always pass struct netdev_notifier_info to netdevice notifiersCong Wang
2013-05-28net: pass info struct via netdevice notifierJiri Pirko
2013-04-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2013-04-19netfilter: xt_rpfilter: depend on raw or mangle tableFlorian Westphal
2013-04-19netfilter: xt_rpfilter: skip locally generated broadcast/multicast, tooFlorian Westphal
2013-04-18netfilter: add my copyright statementsPatrick McHardy
2013-04-08netfilter: nat: propagate errors from xfrm_me_harder()Patrick McHardy
2013-04-08netfilter: ipv6: propagate routing errors from ip6_route_me_harder()Patrick McHardy
2013-04-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2013-04-06netfilter: implement RFC3168 5.3 (ecn protection) for ipv6 fragmentation hand...Hannes Frederic Sowa
2013-04-05netfilter: nf_log: prepare net namespace support for loggersGao feng
2013-04-03netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengthsMatthias Schiffer
2013-03-25Merge branch 'master' of git://1984.lsi.us.es/nf-nextDavid S. Miller
2013-03-20Merge branch 'master' of git://1984.lsi.us.es/nfDavid S. Miller
2013-03-19inet: limit length of fragment queue hash table bucket listsHannes Frederic Sowa
2013-03-15netfilter: ip6t_NPT: restrict to mangle tableFlorian Westphal