summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2015-07-03netfilter: nf_tables: allow to change chain policy without hook if it existsPablo Neira Ayuso
2015-07-03netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is setPablo Neira Ayuso
2015-07-03netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()Ian Wilson
2015-07-03netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warningsChen Gang
2015-04-29netfilter: conntrack: disable generic tracking for known protocolsFlorian Westphal
2015-03-26netfilter: xt_socket: fix a stack corruption bugEric Dumazet
2015-03-26netfilter: nft_compat: fix module refcount underflowPablo Neira Ayuso
2015-03-26ipvs: rerouting to local clients is not needed anymoreJulian Anastasov
2015-03-26ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov
2015-01-29ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter
2015-01-29netfilter: nfnetlink: validate nfnetlink header from batchPablo Neira Ayuso
2015-01-27netfilter: ipset: small potential read beyond the end of bufferDan Carpenter
2014-11-21netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()Arturo Borrero
2014-11-21netfilter: nf_log: release skbuff on nlmsg put failureHoucheng Lin
2014-11-21netfilter: nfnetlink_log: fix maximum packet length logged to userspaceFlorian Westphal
2014-11-21netfilter: nf_log: account for size of NLMSG_DONE attributeFlorian Westphal
2014-11-21netfilter: ipset: off by one in ip_set_nfnl_get_byindex()Dan Carpenter
2014-10-05ipvs: fix ipv6 hook registration for local repliesJulian Anastasov
2014-10-05netfilter: x_tables: allow to use default cgroup matchDaniel Borkmann
2014-10-05ipvs: Maintain all DSCP and ECN bits for ipv6 tun forwardingAlex Gartrell
2014-10-05netfilter: xt_hashlimit: perform garbage collection from process contextEric Dumazet
2014-10-05ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov
2014-08-14inetpeer: get rid of ip_id_countEric Dumazet
2014-07-09netfilter: nf_nat: fix oops on netns removalFlorian Westphal
2014-07-06ipvs: Fix panic due to non-linear skbPeter Christensen
2014-06-26net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman
2014-06-11netfilter: nfnetlink: Fix use after free when it fails to process batchDenys Fedoryshchenko
2014-05-31netfilter: nf_tables: set names cannot be larger than 15 bytesPablo Neira Ayuso
2014-05-31netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4Patrick McHardy
2014-03-27core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errorsZoltan Kiss
2014-02-18netfilter: ctnetlink: force null nat binding on insertPablo Neira Ayuso
2014-02-17netfilter: nf_tables: check if payload length is a power of 2Nikolay Aleksandrov
2014-02-14netfilter: nft_meta: fix typo "CONFIG_NET_CLS_ROUTE"Paul Bolle
2014-02-14netfilter: nft_reject_inet: fix unintended fall-through in switch-statatementPatrick McHardy
2014-02-09net: Include appropriate header file in netfilter/nft_lookup.cRashika Kheria
2014-02-07netfilter: nf_tables: unininline nft_trace_packet()Patrick McHardy
2014-02-07netfilter: nf_tables: fix loop checking with end interval elementsPablo Neira Ayuso
2014-02-07netfilter: nft_rbtree: fix data handling of end interval elementsPablo Neira Ayuso
2014-02-07netfilter: nf_tables: do not allow NFT_SET_ELEM_INTERVAL_END flag and dataPablo Neira Ayuso
2014-02-06netfilter: nf_tables: fix racy rule deletionPablo Neira Ayuso
2014-02-06netfilter: nf_tables: fix log/queue expressions for NFPROTO_INETPatrick McHardy
2014-02-06netfilter: nf_tables: add reject module for NFPROTO_INETPatrick McHardy
2014-02-06netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc partsPatrick McHardy
2014-02-06netfilter: nf_tables: add AF specific expression supportPatrick McHardy
2014-02-06netfilter: nft_ct: fix missing NFT_CT_L3PROTOCOL key in validity checksPatrick McHardy
2014-02-06netfilter: nf_tables: fix potential oops when dumping setsPatrick McHardy
2014-02-05netfilter: nf_tables: fix overrun in nf_tables_set_alloc_name()Patrick McHardy
2014-02-05netfilter: nf_conntrack: don't release a conntrack with non-zero refcntPablo Neira Ayuso
2014-02-05netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_getAndrey Vagin
2014-02-05netfilter: nf_tables: fix oops when deleting a chain with referencesPatrick McHardy