summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2017-02-23netfilter: nf_conntrack_sip: extend request line validationUlrich Weber1-1/+4
2017-02-23netfilter: restart search if moved to other chainFlorian Westphal1-0/+7
2016-11-20netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang1-3/+0
2016-06-15nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds1-1/+3
2016-05-01ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni1-1/+1
2015-08-12netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer1-1/+2
2015-08-07ipvs: kernel oops - do_ip_vs_get_ctlHans Schillstrom2-22/+39
2015-08-07ipvs: fix memory leak in ip_vs_ctl.cTommi Rantala1-0/+3
2015-05-09ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter1-5/+5
2015-05-09ipvs: rerouting to local clients is not needed anymoreJulian Anastasov1-11/+21
2015-05-09net: make skb_gso_segment error handling more robustFlorian Westphal1-1/+1
2015-05-09ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov1-0/+3
2015-05-09netfilter: xt_socket: fix a stack corruption bugEric Dumazet1-9/+13
2015-02-20netfilter: conntrack: disable generic tracking for known protocolsFlorian Westphal1-1/+25
2015-02-20netfilter: ipset: small potential read beyond the end of bufferDan Carpenter1-0/+6
2014-11-05ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov1-1/+0
2014-09-13inetpeer: get rid of ip_id_countEric Dumazet1-1/+1
2014-08-06ipvs: stop tot_stats estimator only under CONFIG_SYSCTLJulian Anastasov1-1/+1
2014-04-09netfilter: nf_conntrack_dccp: fix skb_header_pointer API usagesDaniel Borkmann1-3/+3
2013-11-28netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the pa...Patrick McHardy1-1/+1
2013-10-26ip: generate unique IP identificator if local fragmentation is allowedAnsis Atteka1-1/+1
2013-05-30ipvs: ip_vs_sip_fill_param() BUG: bad check of return valueHans Schillstrom1-5/+1
2012-12-06netfilter: Validate the sequence number of dataless ACK packets as wellJozsef Kadlecsik1-8/+2
2012-12-06netfilter: Mark SYN/ACK packets as invalid from original directionJozsef Kadlecsik1-11/+8
2012-10-30netfilter: nf_conntrack: fix racy timer handling with reliable eventsPablo Neira Ayuso1-5/+11
2012-10-17netfilter: xt_limit: have r->cost != 0 case workJan Engelhardt1-4/+4
2012-10-17netfilter: limit, hashlimit: avoid duplicated inlineFlorian Westphal2-8/+5
2012-10-17netfilter: nf_ct_expect: fix possible access to uninitialized timerPablo Neira Ayuso1-23/+6
2012-09-19ipvs: fix info leak in getsockopt(IP_VS_SO_GET_TIMEOUT)Mathias Krause1-0/+1
2012-02-29ipvs: fix matching of fwmark templates during schedulingSimon Horman1-1/+1
2012-02-03net: reintroduce missing rcu_assign_pointer() callsEric Dumazet8-12/+12
2011-12-31netfilter: ctnetlink: fix timeout calculationXi Wang1-2/+2
2011-12-31ipvs: try also real server with port 0 in backup serverJulian Anastasov3-4/+10
2011-12-24Merge branch 'nf' of git://1984.lsi.us.es/netDavid S. Miller1-5/+13
2011-12-24netfilter: ctnetlink: fix scheduling while atomic if helper is autoloadedPablo Neira Ayuso1-0/+3
2011-12-24netfilter: ctnetlink: fix return value of ctnetlink_get_expect()Pablo Neira Ayuso1-5/+10
2011-12-23netfilter: xt_connbytes: handle negation correctlyFlorian Westphal1-3/+3
2011-12-01netfilter: Remove ADVANCED dependency from NF_CONNTRACK_NETBIOS_NSDavid S. Miller1-1/+0
2011-11-29Merge branch 'nf' of git://1984.lsi.us.es/netDavid S. Miller5-43/+73
2011-11-23netfilter: Remove NOTRACK/RAW dependency on NETFILTER_ADVANCED.David S. Miller1-1/+0
2011-11-22netfilter: nf_conntrack: make event callback registration per-netnsPablo Neira Ayuso2-40/+70
2011-11-21netfilter: ipset: suppress compile-time warnings in ip_set_hash_ipport*.cJozsef Kadlecsik3-3/+3
2011-11-06Merge branch 'modsplit-Oct31_2011' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds8-0/+9
2011-11-01netfilter: do not propagate nf_queue errors in nf_hook_slowFlorian Westphal1-6/+5
2011-11-01ipvs: Remove unused variable "cs" from ip_vs_leave function.Krzysztof Wilczynski1-1/+1
2011-11-01netfilter: Remove unnecessary OOM logging messagesJoe Perches13-60/+28
2011-11-01ipvs: Removed unused variablesSimon Horman1-4/+0
2011-11-01ipvs: Remove unused return value of protocol state transitionsSimon Horman4-24/+14
2011-11-01ipvs: Remove unused parameter from ip_vs_confirm_conntrack()Simon Horman2-2/+2
2011-11-01ipvs: Expose ip_vs_ftp module parameters via sysfs.Krzysztof Wilczynski1-2/+3