summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2017-11-11netfilter: xt_socket: fix compilation warnings with gcc 4.7Pablo Neira Ayuso
2017-11-11ipv6: Add rt6_get_cookie() functionMartin KaFai Lau
2017-10-12netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_getAndrey Vagin
2017-09-15netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang
2017-08-26netfilter: ctnetlink: make it safer when updating ct->statusLiping Zhang
2017-02-23netfilter: nf_conntrack_sip: extend request line validationUlrich Weber
2017-02-23netfilter: restart search if moved to other chainFlorian Westphal
2016-11-20netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang
2016-06-15nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds
2016-05-01ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni
2015-08-12netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer
2015-08-07ipvs: kernel oops - do_ip_vs_get_ctlHans Schillstrom
2015-08-07ipvs: fix memory leak in ip_vs_ctl.cTommi Rantala
2015-05-09ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter
2015-05-09ipvs: rerouting to local clients is not needed anymoreJulian Anastasov
2015-05-09net: make skb_gso_segment error handling more robustFlorian Westphal
2015-05-09ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov
2015-05-09netfilter: xt_socket: fix a stack corruption bugEric Dumazet
2015-02-20netfilter: conntrack: disable generic tracking for known protocolsFlorian Westphal
2015-02-20netfilter: ipset: small potential read beyond the end of bufferDan Carpenter
2014-11-05ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov
2014-09-13inetpeer: get rid of ip_id_countEric Dumazet
2014-08-06ipvs: stop tot_stats estimator only under CONFIG_SYSCTLJulian Anastasov
2014-04-09netfilter: nf_conntrack_dccp: fix skb_header_pointer API usagesDaniel Borkmann
2013-11-28netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the pa...Patrick McHardy
2013-10-26ip: generate unique IP identificator if local fragmentation is allowedAnsis Atteka
2013-05-30ipvs: ip_vs_sip_fill_param() BUG: bad check of return valueHans Schillstrom
2012-12-06netfilter: Validate the sequence number of dataless ACK packets as wellJozsef Kadlecsik
2012-12-06netfilter: Mark SYN/ACK packets as invalid from original directionJozsef Kadlecsik
2012-10-30netfilter: nf_conntrack: fix racy timer handling with reliable eventsPablo Neira Ayuso
2012-10-17netfilter: xt_limit: have r->cost != 0 case workJan Engelhardt
2012-10-17netfilter: limit, hashlimit: avoid duplicated inlineFlorian Westphal
2012-10-17netfilter: nf_ct_expect: fix possible access to uninitialized timerPablo Neira Ayuso
2012-09-19ipvs: fix info leak in getsockopt(IP_VS_SO_GET_TIMEOUT)Mathias Krause
2012-02-29ipvs: fix matching of fwmark templates during schedulingSimon Horman
2012-02-03net: reintroduce missing rcu_assign_pointer() callsEric Dumazet
2011-12-31netfilter: ctnetlink: fix timeout calculationXi Wang
2011-12-31ipvs: try also real server with port 0 in backup serverJulian Anastasov
2011-12-24Merge branch 'nf' of git://1984.lsi.us.es/netDavid S. Miller
2011-12-24netfilter: ctnetlink: fix scheduling while atomic if helper is autoloadedPablo Neira Ayuso
2011-12-24netfilter: ctnetlink: fix return value of ctnetlink_get_expect()Pablo Neira Ayuso
2011-12-23netfilter: xt_connbytes: handle negation correctlyFlorian Westphal
2011-12-01netfilter: Remove ADVANCED dependency from NF_CONNTRACK_NETBIOS_NSDavid S. Miller
2011-11-29Merge branch 'nf' of git://1984.lsi.us.es/netDavid S. Miller
2011-11-23netfilter: Remove NOTRACK/RAW dependency on NETFILTER_ADVANCED.David S. Miller
2011-11-22netfilter: nf_conntrack: make event callback registration per-netnsPablo Neira Ayuso
2011-11-21netfilter: ipset: suppress compile-time warnings in ip_set_hash_ipport*.cJozsef Kadlecsik
2011-11-06Merge branch 'modsplit-Oct31_2011' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2011-11-01netfilter: do not propagate nf_queue errors in nf_hook_slowFlorian Westphal
2011-11-01ipvs: Remove unused variable "cs" from ip_vs_leave function.Krzysztof Wilczynski