summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni1-1/+5
2018-02-25netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()Dmitry Vyukov1-3/+13
2017-12-25netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to registerGao Feng1-18/+1
2017-10-08netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang1-0/+1
2017-02-08netfilter: Fix switch statement warnings with recent gcc.David Miller1-0/+2
2016-08-03netfilter: x_tables: speed up jump target validationFlorian Westphal2-44/+49
2016-07-12netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2-86/+10
2016-07-12netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2-210/+50
2016-07-12netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2-29/+14
2016-07-12netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal1-36/+25
2016-07-12netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal1-46/+36
2016-07-12netfilter: x_tables: check for bogus target offsetFlorian Westphal2-4/+6
2016-07-12netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal2-2/+4
2016-07-12netfilter: x_tables: kill check_entry helperFlorian Westphal2-23/+16
2016-07-12netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal2-21/+2
2016-07-12netfilter: x_tables: validate targets of jumpsFlorian Westphal2-0/+32
2016-07-12netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal2-3/+9
2016-07-12netfilter: x_tables: fix unconditional helperFlorian Westphal2-21/+20
2016-07-12netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal2-4/+8
2016-07-12netfilter: x_tables: validate e->target_offset earlyFlorian Westphal2-18/+16
2016-07-12ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller1-2/+10
2014-11-10netfilter: nft_masq: fix uninitialized range in nft_masq_{ipv4, ipv6}_evalDaniel Borkmann1-0/+1
2014-10-31netfilter: nf_reject_ipv4: split nf_send_reset() in smaller functionsPablo Neira Ayuso1-26/+62
2014-10-13netfilter: nf_tables: restrict nat/masq expressions to nat chain typePablo Neira Ayuso1-0/+1
2014-10-11netfilter: missing module license in the nf_reject_ipvX modulesPablo Neira Ayuso1-0/+3
2014-10-03netfilter: nft_masq: register/unregister notifiers on module init/exitArturo Borrero1-23/+11
2014-10-02netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)Pablo Neira Ayuso2-2/+2
2014-10-02netfilter: move nf_send_resetX() code to nf_reject_ipvX modulesPablo Neira Ayuso3-0/+136
2014-10-02netfilter: nft_reject: introduce icmp code abstraction for inet and bridgePablo Neira Ayuso1-1/+0
2014-09-12netfilter: masquerading needs to be independent of x_tables in KconfigPablo Neira Ayuso1-12/+15
2014-09-12netfilter: NFT_CHAIN_NAT_IPV* is independent of NFT_NATPablo Neira Ayuso1-10/+9
2014-09-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller8-418/+536
2014-09-09netfilter: nf_tables: add new nft_masq expressionArturo Borrero3-0/+96
2014-09-09netfilter: nf_nat: generalize IPv4 masquerading support for nf_tablesArturo Borrero4-99/+170
2014-09-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-48/+56
2014-09-02netfilter: nft_chain_nat_ipv4: use generic IPv4 NAT code from corePablo Neira Ayuso1-120/+37
2014-09-02netfilter: nat: move specific NAT IPv4 to corePablo Neira Ayuso2-199/+233
2014-08-23net: use reciprocal_scale() helperDaniel Borkmann1-1/+1
2014-08-18netfilter: move NAT Kconfig switches out of the iptables scopePablo Neira Ayuso2-48/+56
2014-07-25netfilter: kill remnants of ulog targetsPaul Bolle1-1/+0
2014-07-25netfilter: nf_conntrack: remove exceptional & on function nameHimangi Saraogi1-1/+1
2014-06-30netfilter: use IS_ENABLED() macroDuan Jiong6-10/+14
2014-06-28netfilter: fix several Kconfig problems in NF_LOG_*Pablo Neira Ayuso1-10/+10
2014-06-27netfilter: add generic ARP packet loggerPablo Neira Ayuso3-0/+155
2014-06-27netfilter: log: nf_log_packet() as real unified interfacePablo Neira Ayuso1-7/+7
2014-06-27netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c filesPablo Neira Ayuso3-0/+393
2014-06-25netfilter: kill ulog targetsPablo Neira Ayuso2-517/+0
2014-05-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-20/+6
2014-05-12net: rename local_df to ignore_dfWANG Cong1-1/+1
2014-05-04netfilter: ipv4: defrag: set local_df flag on defragmented skbFlorian Westphal1-2/+3
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-17 18:33:14 +0000