summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2016-11-24netfilter: fix namespace handling in nf_log_proc_dostringJann Horn
2016-09-29ipvs: count pre-established TCP states as activeMichal Kubecek
2016-08-19netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-07-21netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-07-21netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-07-21netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-07-21netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal
2016-07-21netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal
2016-07-21netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-07-21netfilter: x_tables: check standard target size tooFlorian Westphal
2016-07-21netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-07-21netfilter: x_tables: assert minimum target sizeFlorian Westphal
2016-07-21netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-05-11ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni
2015-11-14netfilter: xt_NFQUEUE: fix --queue-bypass regressionHolger Eitzenberger
2015-10-28ipvs: fix crash with sync protocol v0 and FTPJulian Anastasov
2015-10-28ipvs: do not use random local source address for tunnelsJulian Anastasov
2015-10-28netfilter: ctnetlink: put back references to master ct and expect objectsPablo Neira Ayuso
2015-10-28netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer
2015-09-14netfilter: nf_conntrack: don't release a conntrack with non-zero refcntPablo Neira Ayuso
2015-09-14netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_getAndrey Vagin
2015-07-30netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warningsChen Gang
2015-05-20netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()Ian Wilson
2015-04-27netfilter: conntrack: disable generic tracking for known protocolsFlorian Westphal
2015-04-13core, nfqueue, openvswitch: fix compilation warningJiri Slaby
2015-04-09core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errorsZoltan Kiss
2015-03-10netfilter: xt_socket: fix a stack corruption bugEric Dumazet
2015-03-10ipvs: rerouting to local clients is not needed anymoreJulian Anastasov
2015-03-10ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov
2015-01-29ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter
2015-01-26ipvs: correct usage/allocation of seqadj ext in ipvsJesper Dangaard Brouer
2015-01-26netfilter: ipset: small potential read beyond the end of bufferDan Carpenter
2014-11-19netfilter: nf_log: release skbuff on nlmsg put failureHoucheng Lin
2014-11-19netfilter: nfnetlink_log: fix maximum packet length logged to userspaceFlorian Westphal
2014-11-19netfilter: nf_log: account for size of NLMSG_DONE attributeFlorian Westphal
2014-09-26ipvs: fix ipv6 hook registration for local repliesJulian Anastasov
2014-09-26ipvs: Maintain all DSCP and ECN bits for ipv6 tun forwardingAlex Gartrell
2014-09-26ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov
2014-08-19inetpeer: get rid of ip_id_countEric Dumazet
2014-07-17ipvs: Fix panic due to non-linear skbPeter Christensen
2014-07-16netfilter: nf_nat: fix oops on netns removalFlorian Westphal
2014-07-16ipvs: stop tot_stats estimator only under CONFIG_SYSCTLJulian Anastasov
2014-06-23net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman
2014-04-03netfilter: nf_conntrack_dccp: fix skb_header_pointer API usagesDaniel Borkmann
2014-04-03ipvs: fix AF assignment in ip_vs_conn_new()Michal Kubecek
2014-01-15netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helperDaniel Borkmann
2014-01-15netfilter: fix wrong byte order in nf_ct_seqadj_set internal informationPhil Oester
2013-12-08netfilter: push reasm skb through instead of original frag skbsJiri Pirko
2013-10-21netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helperJulian Anastasov
2013-10-01Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller