summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)Author
2019-07-21netfilter: ipv6: nf_defrag: accept duplicate fragments againGuillaume Nault
2019-07-21netfilter: ipv6: nf_defrag: fix leakage of unqueued fragmentsGuillaume Nault
2019-05-02net: IP6 defrag: use rbtrees in nf_conntrack_reasm.cPeter Oskolkov
2019-05-02ipv6: remove dependency of nf_defrag_ipv6 on ipv6 moduleFlorian Westphal
2019-02-20netfilter: nf_tables: fix mismatch in big-endian systemLiping Zhang
2018-11-10Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"Sasha Levin
2018-10-18ip: frags: fix crash in ip_do_fragment()Taehee Yoo
2018-10-18ip: use rb trees for IP frag queue.Peter Oskolkov
2018-10-18ipv6: defrag: drop non-last frags smaller than min mtuFlorian Westphal
2018-10-18inet: frags: fix ip6frag_low_thresh boundaryEric Dumazet
2018-10-18inet: frags: break the 2GB limit for frags storageEric Dumazet
2018-10-18inet: frags: remove inet_frag_maybe_warn_overflow()Eric Dumazet
2018-10-18inet: frags: use rhashtables for reassembly unitsEric Dumazet
2018-10-18inet: frags: add a pointer to struct netns_fragsEric Dumazet
2018-10-18inet: frags: change inet_frags_init_net() return valueEric Dumazet
2018-08-24netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal
2018-08-24netfilter: ipv6: nf_defrag: reduce struct net memory wasteEric Dumazet
2018-07-22netfilter: ipv6: nf_defrag: drop skb dst before queueingFlorian Westphal
2018-07-17netfilter: x_tables: initialise match/target check parameter structFlorian Westphal
2018-05-30netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failureSubash Abhinov Kasiviswanathan
2018-05-30netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460Subash Abhinov Kasiviswanathan
2018-03-18netfilter: x_tables: pack percpu counter allocationsFlorian Westphal
2018-03-18netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal
2018-03-18netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal
2018-03-18netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pktFlorian Westphal
2018-03-18netfilter: add back stackpointer size checksFlorian Westphal
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni
2017-09-20Revert "net: fix percpu memory leaks"Jesper Dangaard Brouer
2017-08-11netfilter: use fwmark_reflect in nf_send_resetPau Espin Pedrol
2017-03-22ipv6: orphan skbs in reassembly unitEric Dumazet
2016-11-29netfilter: ipv6: nf_defrag: drop mangled skb on ream errorFlorian Westphal
2016-11-24netfilter: Update nf_send_reset6 to consider L3 domainDavid Ahern
2016-10-31netfilter: nft_dup: do not use sreg_dev if the user doesn't specify itLiping Zhang
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso
2016-09-25netfilter: nf_log: get rid of XT_LOG_* macrosLiping Zhang
2016-09-25netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang
2016-09-24netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole
2016-09-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2016-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2016-09-12netfilter: Add the missed return value check of nft_register_chain_typeGao Feng
2016-09-12netfilter: nf_tables: don't drop IPv6 packets that cannot parse transportPablo Neira Ayuso
2016-09-06netfilter: nft_chain_route: re-route before skb is queued to userspaceLiping Zhang
2016-08-30netfilter: log: Check param to avoid overflow in nf_log_setGao Feng
2016-08-25netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-07-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches
2016-07-01netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso
2016-06-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller
2016-05-30netfilter: nf_dup_ipv6: set again FLOWI_FLAG_KNOWN_NH at flowi6_flagsPaolo Abeni