aboutsummaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)Author
2016-08-03netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-07-12netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-07-12netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-07-12netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-07-12netfilter: ip6_tables: simplify translate_compat_table argsFlorian Westphal
2016-07-12netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-07-12netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-07-12netfilter: x_tables: kill check_entry helperFlorian Westphal
2016-07-12netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-07-12netfilter: x_tables: validate targets of jumpsFlorian Westphal
2016-07-12netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal
2016-07-12netfilter: x_tables: fix unconditional helperFlorian Westphal
2016-07-12netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal
2016-07-12netfilter: x_tables: validate e->target_offset earlyFlorian Westphal
2015-12-14ipv6: distinguish frag queues by device for multicast and link-local packetsMichal Kubeček
2014-11-10netfilter: nft_masq: fix uninitialized range in nft_masq_{ipv4, ipv6}_evalDaniel Borkmann
2014-10-31netfilter: nf_reject_ipv6: split nf_send_reset6() in smaller functionsPablo Neira Ayuso
2014-10-13netfilter: nf_tables: restrict nat/masq expressions to nat chain typePablo Neira Ayuso
2014-10-11netfilter: missing module license in the nf_reject_ipvX modulesPablo Neira Ayuso
2014-10-03netfilter: nft_masq: register/unregister notifiers on module init/exitArturo Borrero
2014-10-02netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)Pablo Neira Ayuso
2014-10-02netfilter: move nf_send_resetX() code to nf_reject_ipvX modulesPablo Neira Ayuso
2014-09-12netfilter: masquerading needs to be independent of x_tables in KconfigPablo Neira Ayuso
2014-09-12netfilter: NFT_CHAIN_NAT_IPV* is independent of NFT_NATPablo Neira Ayuso
2014-09-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2014-09-09netfilter: nf_tables: add new nft_masq expressionArturo Borrero
2014-09-09netfilter: nf_nat: generalize IPv6 masquerading support for nf_tablesArturo Borrero
2014-09-09netfilter: nft_chain_nat_ipv6: use generic IPv6 NAT code from corePablo Neira Ayuso
2014-09-09netfilter: nat: move specific NAT IPv6 to corePablo Neira Ayuso
2014-09-02netfilter: fix missing dependencies in NETFILTER_XT_TARGET_LOGPablo Neira
2014-08-18netfilter: move NAT Kconfig switches out of the iptables scopePablo Neira Ayuso
2014-08-02inet: frags: use kmem_cache for inet_frag_queueNikolay Aleksandrov
2014-08-02inet: frags: rename last_in to flagsNikolay Aleksandrov
2014-07-27inet: frag: set limits and make init_net's high_thresh limit globalNikolay Aleksandrov
2014-07-27inet: frag: use seqlock for hash rebuildFlorian Westphal
2014-07-27inet: frag: remove periodic secret rebuild timerFlorian Westphal
2014-07-27inet: frag: remove lru listFlorian Westphal
2014-07-27inet: frag: move evictor calls into frag_find functionFlorian Westphal
2014-07-27inet: frag: remove hash size assumptions from callersFlorian Westphal
2014-07-27inet: frag: constify match, hashfn and constructor argumentsFlorian Westphal
2014-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2014-07-15netfilter: remove unnecessary break after returnFabian Frederick
2014-06-30netfilter: use IS_ENABLED() macroDuan Jiong
2014-06-28netfilter: fix several Kconfig problems in NF_LOG_*Pablo Neira Ayuso
2014-06-27netfilter: log: nf_log_packet() as real unified interfacePablo Neira Ayuso
2014-06-27netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c filesPablo Neira Ayuso
2014-05-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2014-05-12net: rename local_df to ignore_dfWANG Cong
2014-04-29netfilter: add helper for adding nat extensionFlorian Westphal
2014-04-28net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iifJulian Anastasov