summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2015-03-10netfilter: xt_socket: fix a stack corruption bugEric Dumazet
2015-03-10ipvs: rerouting to local clients is not needed anymoreJulian Anastasov
2015-03-10ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov
2015-01-29ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter
2015-01-26ipvs: correct usage/allocation of seqadj ext in ipvsJesper Dangaard Brouer
2015-01-26netfilter: ipset: small potential read beyond the end of bufferDan Carpenter
2014-11-19netfilter: nf_log: release skbuff on nlmsg put failureHoucheng Lin
2014-11-19netfilter: nfnetlink_log: fix maximum packet length logged to userspaceFlorian Westphal
2014-11-19netfilter: nf_log: account for size of NLMSG_DONE attributeFlorian Westphal
2014-09-26ipvs: fix ipv6 hook registration for local repliesJulian Anastasov
2014-09-26ipvs: Maintain all DSCP and ECN bits for ipv6 tun forwardingAlex Gartrell
2014-09-26ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov
2014-08-19inetpeer: get rid of ip_id_countEric Dumazet
2014-07-17ipvs: Fix panic due to non-linear skbPeter Christensen
2014-07-16netfilter: nf_nat: fix oops on netns removalFlorian Westphal
2014-07-16ipvs: stop tot_stats estimator only under CONFIG_SYSCTLJulian Anastasov
2014-06-23net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman
2014-04-03netfilter: nf_conntrack_dccp: fix skb_header_pointer API usagesDaniel Borkmann
2014-04-03ipvs: fix AF assignment in ip_vs_conn_new()Michal Kubecek
2014-01-15netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helperDaniel Borkmann
2014-01-15netfilter: fix wrong byte order in nf_ct_seqadj_set internal informationPhil Oester
2013-12-08netfilter: push reasm skb through instead of original frag skbsJiri Pirko
2013-10-21netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helperJulian Anastasov
2013-10-01Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller
2013-09-30netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packetsPatrick McHardy
2013-09-19ip: generate unique IP identificator if local fragmentation is allowedAnsis Atteka
2013-09-18ipvs: stats should not depend on CPU 0Julian Anastasov
2013-09-18ipvs: do not use dest after ip_vs_dest_put in LBLCRJulian Anastasov
2013-09-18ipvs: do not use dest after ip_vs_dest_put in LBLCJulian Anastasov
2013-09-18ipvs: make the service replacement more robustJulian Anastasov
2013-09-18ipvs: fix overflow on dest weight multiplySimon Kirby
2013-09-17netfilter: nfnetlink_queue: use network skb for sequence adjustmentGao feng
2013-09-16netfilter: ipset: Fix serious failure in CIDR trackingOliver Smith
2013-09-16netfilter: ipset: Validate the set family and not the set type family at swap...Jozsef Kadlecsik
2013-09-16netfilter: ipset: Consistent userspace testing with nomatch flagJozsef Kadlecsik
2013-09-16netfilter: ipset: Skip really non-first fragments for IPv6 when getting port/...Jozsef Kadlecsik
2013-09-05netfilter: Fix build errors with xt_socket.cDavid S. Miller
2013-09-04netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packetPhil Oester
2013-09-04netfilter: synproxy_core: fix warning in __nf_ct_ext_add_length()Patrick McHardy
2013-08-28netfilter: ctnetlink: fix uninitialized variableFlorian Westphal
2013-08-28netfilter: add SYNPROXY core/targetPatrick McHardy
2013-08-28netfilter: nf_conntrack: make sequence number adjustments usuable without NATPatrick McHardy
2013-08-20Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller
2013-08-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2013-08-13netfilter: nfnetlink_queue: allow to attach expectations to conntracksPablo Neira Ayuso
2013-08-13netfilter: ctnetlink: refactor ctnetlink_create_expectPablo Neira Ayuso
2013-08-10netfilter: nf_conntrack: fix tcp_in_window for Fast OpenYuchung Cheng
2013-08-09netfilter: nf_conntrack: don't send destroy events from iteratorFlorian Westphal
2013-08-07ipvs: ip_vs_sh: ip_vs_sh_get_port: check skb_header_pointer for NULLDaniel Borkmann
2013-08-06ipvs: fixed spacing at for statementsDragos Foianu