summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)Author
2019-03-23netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_EN...Pablo Neira Ayuso
2018-08-24netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal
2018-07-17netfilter: x_tables: initialise match/target check parameter structFlorian Westphal
2018-04-08netfilter: nf_nat_h323: fix logical-not-parentheses warningNick Desaulniers
2018-03-18netfilter: x_tables: pack percpu counter allocationsFlorian Westphal
2018-03-18netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal
2018-03-18netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal
2018-03-18netfilter: add back stackpointer size checksFlorian Westphal
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni
2018-02-25netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()Dmitry Vyukov
2018-01-31netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso
2018-01-31netfilter: use fwmark_reflect in nf_send_resetPau Espin Pedrol
2018-01-31netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in...Hongxu Jia
2018-01-31netfilter: x_tables: speed up jump target validationFlorian Westphal
2017-12-25netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to registerGao Feng
2017-12-16netfilter: don't track fragmented packetsFlorian Westphal
2017-10-08netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang
2016-06-24netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-06-24netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-06-24netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-06-24netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal
2016-06-24netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal
2016-06-24netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-06-24netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-06-24netfilter: x_tables: kill check_entry helperFlorian Westphal
2016-06-24netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-06-24netfilter: x_tables: validate targets of jumpsFlorian Westphal
2016-06-24netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal
2016-06-24netfilter: x_tables: fix unconditional helperFlorian Westphal
2016-06-24netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal
2016-06-24netfilter: x_tables: validate e->target_offset earlyFlorian Westphal
2016-04-20ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller
2016-03-03inet: frag: Always orphan skbs inside ip_defrag()Joe Stringer
2015-12-10netfilter: nf_dup: add missing dependencies with NF_CONNTRACKPablo Neira Ayuso
2015-11-09netfilter: Fix removal of GRE expectation entries created by PPTPAnthony Lineham
2015-11-05ipv4: use sk_fullsock() in ipv4_conntrack_defrag()Eric Dumazet
2015-10-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2015-10-17Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso
2015-10-16netfilter: ipv4: whitespace around operatorsIan Morris
2015-10-16netfilter: ipv4: code indentationIan Morris
2015-10-16netfilter: ipv4: function definition layoutIan Morris
2015-10-16netfilter: ipv4: ternary operator layoutIan Morris
2015-10-16netfilter: ipv4: label placementIan Morris
2015-10-16netfilter: remove hook owner refcountingFlorian Westphal
2015-10-12ipv4: Pass struct net into ip_defrag and ip_check_defragEric W. Biederman
2015-10-12netfilter: ipt_rpfilter: remove the nh_scope test in rpfilter_lookup_reverselucien
2015-10-08ipv4, ipv6: Pass net into ip_local_out and ip6_local_outEric W. Biederman
2015-10-08ipv4: Merge ip_local_out and ip_local_out_skEric W. Biederman
2015-10-01netfilter: fix Kconfig dependencies for nf_dup_ipv{4,6}Pablo Neira Ayuso
2015-09-29ipv4: Pass struct net into ip_route_me_harderEric W. Biederman