summaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nfnetlink: keep going batch handling on missing modulesPablo Neira Ayuso2015-07-021-13/+25
* netfilter: nf_queue: Don't recompute the hook_list headEric W. Biederman2015-07-021-1/+1
* netfilter: nf_qeueue: Drop queue entries on nf_unregister_hookEric W. Biederman2015-06-234-1/+42
* netfilter: nftables: Do not run chains in the wrong network namespaceEric W. Biederman2015-06-231-1/+6
* netfilter: use forward declaration instead of including linux/proc_fs.hPablo Neira Ayuso2015-06-181-0/+1
* netfilter: Kill unused copies of RCV_SKB_FAILEric W. Biederman2015-06-182-4/+0
* netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flagHarout Hedeshian2015-06-181-6/+53
* netfilter: nfnetlink_queue: add security context informationRoman Kubiak2015-06-181-1/+34
* netfilter: nf_tables_netdev: unregister hooks on net_device removalPablo Neira Ayuso2015-06-152-4/+87
* netfilter: nf_tables: add nft_register_basechain() and nft_unregister_basecha...Pablo Neira Ayuso2015-06-151-15/+37
* netfilter: nf_tables: attach net_device to basechainPablo Neira Ayuso2015-06-151-37/+42
* netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference.Eric Dumazet2015-06-151-20/+12
* Merge branch 'master' of git://blackhole.kfki.hu/nf-nextPablo Neira Ayuso2015-06-1521-1270/+1261
|\
| * netfilter: ipset: Fix coding styles reported by checkpatch.plJozsef Kadlecsik2015-06-1421-289/+322
| * netfilter: ipset: Introduce RCU locking in list typeJozsef Kadlecsik2015-06-141-209/+189
| * netfilter: ipset: Introduce RCU locking in hash:* typesJozsef Kadlecsik2015-06-1412-236/+364
| * netfilter: ipset: Introduce RCU locking in bitmap:* typesJozsef Kadlecsik2015-06-144-14/+38
| * netfilter: ipset: Prepare the ipset core to use RCU at set levelJozsef Kadlecsik2015-06-141-22/+22
| * netfilter:ipset Remove rbtree from hash:net,ifaceJozsef Kadlecsik2015-06-141-143/+20
| * netfilter: ipset: Make sure listing doesn't grab a set which is just being de...Jozsef Kadlecsik2015-06-141-15/+34
| * netfilter: ipset: Fix parallel resizing and listing of the same setJozsef Kadlecsik2015-06-142-15/+58
| * netfilter: ipset: Fix cidr handling for hash:*net* typesJozsef Kadlecsik2015-06-147-34/+42
| * netfilter: ipset: Check CIDR value only when attribute is givenSergey Popovich2015-06-144-49/+41
| * netfilter: ipset: Make sure we always return line number on batchSergey Popovich2015-06-1415-75/+75
| * netfilter: ipset: Permit CIDR equal to the host address CIDR in IPv6Sergey Popovich2015-06-145-15/+43
| * netfilter: ipset: Check extensions attributes before getting extensions.Sergey Popovich2015-06-1416-170/+29
| * netfilter: ipset: Use SET_WITH_*() helpers to test set extensionsSergey Popovich2015-06-142-7/+7
* | netfilter: Kconfig: get rid of parens around depends onPablo Neira Ayuso2015-06-151-9/+9
|/
* netfilter: xtables: avoid percpu ruleset duplicationFlorian Westphal2015-06-121-15/+8
* netfilter: conntrack: warn the user if there is a better helper to useMarcelo Ricardo Leitner2015-06-121-1/+7
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2015-05-314-5/+231
|\
| * netfilter: nf_tables: add netdev table to filter from ingressPablo Neira Ayuso2015-05-263-0/+189
| * netfilter: nf_tables: allow to bind table to net_devicePablo Neira Ayuso2015-05-261-5/+41
| * netfilter: default CONFIG_NETFILTER_INGRESS to yPablo Neira Ayuso2015-05-261-0/+1
* | ipv6: Set FLOWI_FLAG_KNOWN_NH at flowi6_flagsMartin KaFai Lau2015-05-252-4/+10
* | ipv6: Add rt6_get_cookie() functionMartin KaFai Lau2015-05-251-1/+1
* | ipv6: Remove external dependency on rt6i_gateway and RTF_ANYCASTMartin KaFai Lau2015-05-252-3/+3
* | ipv6: Remove external dependency on rt6i_dst and rt6i_srcMartin KaFai Lau2015-05-251-2/+2
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2015-05-236-23/+58
|\ \ | |/ |/|
| * netfilter: nfnetlink_{log,queue}: Register pernet in first placeFrancesco Ruggeri2015-05-202-18/+19
| * netfilter: nf_tables: fix bogus warning in nft_data_uninit()Mirek Kratochvil2015-05-151-2/+2
| * conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transitionJesper Dangaard Brouer2015-05-151-3/+32
| * netfilter: avoid build error if TPROXY/SOCKET=y && NF_DEFRAG_IPV6=mFlorian Westphal2015-05-151-0/+2
| * ipvs: fix memory leak in ip_vs_ctl.cTommi Rantala2015-05-081-0/+3
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2015-05-1824-231/+307
|\ \
| * | netfilter: Use correct return for seq_show functionsJoe Perches2015-05-172-13/+7
| * | netfilter: x_tables: add context to know if extension runs from nft_compatPablo Neira Ayuso2015-05-152-0/+8
| * | netfilter: xt_MARK: Add ARP supportZhang Chunyu2015-05-141-0/+1
| * | netfilter: ipset: deinline ip_set_put_extensions()Denys Vlasenko2015-05-141-0/+25
| * | netfilter: ipset: Use better include files in xt_set.cJozsef Kadlecsik2015-05-131-1/+2