summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nft_set_bitmap: incorrect bitmap sizePablo Neira Ayuso2017-02-261-1/+1
* netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.Jarno Rajahalme2017-02-261-2/+2
* netfilter: nf_ct_expect: nf_ct_expect_related_report(): Return zero on success.Jarno Rajahalme2017-02-251-1/+1
* netfilter: nft_ct: fix random validation errors for zone set supportFlorian Westphal2017-02-231-0/+1
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2017-02-236-39/+81
|\
| * Merge branch 'master' of git://blackhole.kfki.hu/nfPablo Neira Ayuso2017-02-212-4/+7
| |\
| | * netfilter: ipset: Null pointer exception in ipset list:setVishwanath Pai2017-02-191-3/+6
| | * Fix bug: sometimes valid entries in hash:* types of sets were evictedJozsef Kadlecsik2017-02-191-1/+1
| * | netfilter: nfnetlink: remove static declaration from err_listLiping Zhang2017-02-211-1/+1
| * | netfilter: xt_hashlimit: Fix integer divide round to zero.Alban Browaeys2017-02-191-16/+9
| |/
| * netfilter: ctnetlink: Fix regression in CTA_HELP processingKevin Cernekee2017-02-061-4/+13
| * netfilter: ctnetlink: Fix regression in CTA_STATUS processingKevin Cernekee2017-02-061-1/+25
| * netfilter: nf_ct_helper: warn when not applying default helper assignmentJiri Kosina2017-02-061-13/+26
* | netfilter: nf_tables: honor NFT_SET_OBJECT in set backend selectionPablo Neira Ayuso2017-02-123-3/+4
* | netfilter: nf_tables: add NFTA_RULE_ID attributePablo Neira Ayuso2017-02-121-0/+26
* | netfilter: nf_tables: add check_genid to the nfnetlink subsystemPablo Neira Ayuso2017-02-121-0/+6
* | netfilter: nfnetlink: allow to check for generation IDPablo Neira Ayuso2017-02-121-4/+27
* | netfilter: nfnetlink: add nfnetlink_rcv_skb_batch()Pablo Neira Ayuso2017-02-121-23/+28
* | netfilter: nfnetlink: get rid of u_intX_t typesPablo Neira Ayuso2017-02-121-8/+8
* | netfilter: nf_ct_expect: nf_ct_expect_insert() returns voidGao Feng2017-02-121-5/+3
* | netfilter: nf_ct_sip: Use mod_timer_pending()Gao Feng2017-02-121-7/+5
* | netfilter: nft_exthdr: add TCP option matchingManuel Messner2017-02-082-15/+108
* | netfilter: nft_ct: add zone id set supportFlorian Westphal2017-02-081-1/+143
* | netfilter: nft_ct: prepare for key-dependent error unwindFlorian Westphal2017-02-081-14/+15
* | netfilter: nft_ct: add zone id get supportFlorian Westphal2017-02-081-3/+19
* | netfilter: nf_tables: add bitmap set typePablo Neira Ayuso2017-02-083-0/+321
* | netfilter: nf_tables: add space notation to setsPablo Neira Ayuso2017-02-083-5/+19
* | netfilter: nf_tables: rename struct nft_set_estimate class fieldPablo Neira Ayuso2017-02-083-8/+8
* | netfilter: nf_tables: add flush field to struct nft_set_iterPablo Neira Ayuso2017-02-081-0/+4
* | netfilter: nf_tables: rename deactivate_one() to flush()Pablo Neira Ayuso2017-02-083-9/+9
* | netfilter: nf_tables: use struct nft_set_iter in set element flushPablo Neira Ayuso2017-02-081-7/+5
* | netfilter: nf_tables: pass netns to set->ops->remove()Pablo Neira Ayuso2017-02-083-5/+7
* | netfilter: nft_exthdr: Add support for existence checkPhil Sutter2017-02-081-2/+20
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2017-02-0331-513/+461
|\ \
| * | netfilter: allow logging from non-init namespacesMichal Kubeček2017-02-021-0/+24
| * | ipvs: free ip_vs_dest structs when refcnt=0David Windsor2017-02-021-5/+3
| * | netfilter: merge ctinfo into nfct pointer storage areaFlorian Westphal2017-02-024-8/+12
| * | netfilter: guarantee 8 byte minalign for template addressesFlorian Westphal2017-02-021-5/+24
| * | netfilter: add and use nf_ct_set helperFlorian Westphal2017-02-023-14/+6
| * | skbuff: add and use skb_nfct helperFlorian Westphal2017-02-023-4/+4
| * | netfilter: reduce direct skb->nfct usageFlorian Westphal2017-02-021-6/+9
| * | netfilter: conntrack: no need to pass ctinfo to error handlerFlorian Westphal2017-02-025-7/+3
| * | netfilter: nf_tables: Eliminate duplicated code in nf_tables_table_enable()Feng2017-02-021-23/+25
| * | netfilter: nf_tables: eliminate useless condition checksGao Feng2017-01-181-12/+3
| * | netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev familyLiping Zhang2017-01-181-1/+27
| * | netfilter: pkttype: unnecessary to check ipv6 multicast addressLiping Zhang2017-01-182-6/+2
| * | xtables: extend matches and targets with .usersizeWillem de Bruijn2017-01-0911-0/+19
| * | xtables: use match, target and data copy_to_user helpers in compatWillem de Bruijn2017-01-091-10/+4
| * | xtables: add xt_match, xt_target and data copy_to_user functionsWillem de Bruijn2017-01-091-0/+54
| * | netfilter: xt_connlimit: use rb_entry()Geliang Tang2017-01-051-2/+2