summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: bump set->ndeact on set flushPablo Neira Ayuso2017-01-241-0/+1
* netfilter: nf_tables: deconstify walk callback functionPablo Neira Ayuso2017-01-243-14/+14
* netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCLPablo Neira Ayuso2017-01-241-7/+9
* netfilter: nft_log: restrict the log prefix length to 127Liping Zhang2017-01-242-2/+2
* netfilter: nf_tables: validate the name size when possibleLiping Zhang2017-01-234-11/+22
* netfilter: conntrack: refine gc worker heuristics, reduxFlorian Westphal2017-01-191-19/+20
* netfilter: conntrack: remove GC_MAX_EVICTS breakFlorian Westphal2017-01-191-5/+2
* netfilter: Fix typo in NF_CONNTRACK Kconfig option descriptionWilliam Breathitt Gray2017-01-161-1/+1
* netfilter: nf_tables: fix possible oops when dumping stateful objectsLiping Zhang2017-01-161-2/+3
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2017-01-054-22/+35
|\
| * netfilter: nft_payload: mangle ckecksum if NFT_PAYLOAD_L4CSUM_PSEUDOHDR is setPablo Neira Ayuso2016-12-141-8/+19
| * netfilter: nf_tables: fix oob accessFlorian Westphal2016-12-141-1/+1
| * netfilter: nft_queue: use raw_smp_processor_id()Pablo Neira Ayuso2016-12-141-1/+1
| * netfilter: nft_quota: reset quota after dumpPablo Neira Ayuso2016-12-141-12/+14
* | ktime: Get rid of the unionThomas Gleixner2016-12-254-5/+5
* | Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds2016-12-242-2/+2
|/
* netfilter: nft_counter: rework atomic dump and resetPablo Neira2016-12-111-72/+55
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2016-12-0749-529/+1878
|\
| * netfilter: nft_quota: allow to restore consumed quotaPablo Neira Ayuso2016-12-071-2/+9
| * netfilter: xt_bpf: support ebpfWillem de Bruijn2016-12-071-16/+80
| * netfilter: x_tables: avoid warn and OOM killer on vmalloc callMarcelo Ricardo Leitner2016-12-071-1/+3
| * netfilter: nf_tables: support for set flushingPablo Neira Ayuso2016-12-073-6/+51
| * netfilter: nft_set: introduce nft_{hash, rbtree}_deactivate_one()Pablo Neira Ayuso2016-12-072-8/+27
| * netfilter: nf_tables: constify struct nft_ctx * parameter in nft_trans_alloc()Pablo Neira Ayuso2016-12-071-2/+2
| * netfilter: nat: skip checksum on offload SCTP packetsDavide Caratti2016-12-071-1/+4
| * netfilter: nf_tables: allow to filter stateful object dumps by typePablo Neira Ayuso2016-12-071-0/+50
| * netfilter: nft_objref: support for stateful object mapsPablo Neira Ayuso2016-12-072-1/+119
| * netfilter: nf_tables: add stateful object reference to set elementsPablo Neira Ayuso2016-12-071-10/+62
| * netfilter: nft_quota: add depleted flag for objectsPablo Neira Ayuso2016-12-072-8/+29
| * netfilter: nf_tables: notify internal updates of stateful objectsPablo Neira Ayuso2016-12-071-12/+19
| * netfilter: nf_tables: atomic dump and reset for stateful objectsPablo Neira Ayuso2016-12-073-22/+81
| * netfilter: nft_quota: dump consumed quotaPablo Neira Ayuso2016-12-071-5/+16
| * netfilter: nf_tables: add stateful object reference expressionPablo Neira Ayuso2016-12-063-0/+119
| * netfilter: nft_quota: add stateful object typePablo Neira Ayuso2016-12-061-13/+83
| * netfilter: nft_counter: add stateful object typePablo Neira Ayuso2016-12-061-27/+113
| * netfilter: nf_tables: add stateful objectsPablo Neira Ayuso2016-12-061-0/+516
| * netfilter: add and use nf_fwd_netdev_egressFlorian Westphal2016-12-062-10/+27
| * netfilter: xt_multiport: Fix wrong unmatch result with multiple portsGao Feng2016-12-061-7/+19
| * netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fieldsPablo Neira Ayuso2016-12-061-5/+102
| * netfilter: nft_fib: convert htonl to ntohl properlyLiping Zhang2016-12-061-1/+1
| * netfilter: x_tables: pack percpu counter allocationsFlorian Westphal2016-12-061-9/+24
| * netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal2016-12-061-0/+30
| * netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal2016-12-061-0/+9
| * netfilter: convert while loops to for loopsAaron Conole2016-12-061-4/+2
| * netfilter: introduce accessor functions for hook entriesAaron Conole2016-12-062-9/+6
| * netfilter: defrag: only register defrag functionality if neededFlorian Westphal2016-12-062-10/+38
| * netfilter: conntrack: add nf_conntrack_default_on sysctlFlorian Westphal2016-12-042-1/+28
| * netfilter: conntrack: register hooks in netns when needed by rulesetFlorian Westphal2016-12-041-1/+37
| * netfilter: nf_tables: add conntrack dependencies for nat/masq/redir expressionsFlorian Westphal2016-12-043-3/+12
| * netfilter: nat: add dependencies on conntrack moduleFlorian Westphal2016-12-043-5/+36