Commits · 58e207e4983d7acea39b7fbec9343d8a6d218a18 · jan.koester / Linux · GitLab

Sep 25, 2016
- netfilter: evict stale entries when user reads /proc/net/nf_conntrack · 58e207e4
  Florian Westphal authored Sep 22, 2016
  58e207e4
- netfilter: xt_hashlimit: Create revision 2 to support higher pps rates · 11d5f157
  Vishwanath Pai authored Sep 22, 2016
  11d5f157
- netfilter: xt_hashlimit: Prepare for revision 2 · 0dc60a45
  Vishwanath Pai authored Sep 22, 2016
  0dc60a45
- netfilter: nft_ct: report error if mark and dir specified simultaneously · 7bfdde70
  Liping Zhang authored Sep 22, 2016
  7bfdde70
- netfilter: nft_ct: unnecessary to require dir when use ct l3proto/protocol · d767ff2c
  Liping Zhang authored Sep 22, 2016
  d767ff2c
- netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack · 8d11350f
  Gao Feng authored Sep 22, 2016
  8d11350f
- netfilter: replace list_head with single linked list · e3b37f11
  Aaron Conole authored Sep 21, 2016
  e3b37f11
Sep 24, 2016
- netfilter: nf_queue: whitespace cleanup · 54f17bbc
  Aaron Conole authored Sep 21, 2016
  54f17bbc
- netfilter: Only allow sane values in nf_register_net_hook · d4bb5caa
  Aaron Conole authored Sep 21, 2016
  d4bb5caa
- netfilter: Remove explicit rcu_read_lock in nf_hook_slow · e2361cb9
  Aaron Conole authored Sep 21, 2016
  e2361cb9
- netfilter: call nf_hook_ingress with rcu_read_lock · 2c1e2703
  Aaron Conole authored Sep 21, 2016
  2c1e2703
- netfilter: call nf_hook_state_init with rcu_read_lock held · fe72926b
  Florian Westphal authored Sep 21, 2016
  fe72926b
- netfilter: bridge: add and use br_nf_hook_thresh · c5136b15
  Florian Westphal authored Sep 21, 2016
  c5136b15
- netfilter: xt_TCPMSS: Refactor the codes to decrease one condition check and more readable · 50f4c7b7
  Gao Feng authored Sep 07, 2016
  50f4c7b7
Sep 23, 2016
- netfilter: nft_lookup: remove superfluous element found check · 4004d5c3
  Pablo Neira Ayuso authored Sep 20, 2016
  4004d5c3
- netfilter: xt_helper: Use sizeof(variable) instead of literal number · b9d80f83
  Gao Feng authored Sep 20, 2016
  b9d80f83
- netfilter: Enhance the codes used to get random once · 7bdc6624
  Gao Feng authored Sep 18, 2016
  7bdc6624
- netfilter: nf_tables: check tprot_set first when we use xt.thoff · a20877b5
  Liping Zhang authored Sep 17, 2016
  a20877b5
- netfilter: nf_tables: improve nft payload fast eval · 8dc3c2b8
  Liping Zhang authored Sep 15, 2016
  8dc3c2b8
- netfilter: nf_queue: improve queue range support for bridge family · 2462f3f4
  Liping Zhang authored Sep 15, 2016
  2462f3f4
- netfilter: nft_queue: add _SREG_QNUM attr to select the queue number · 8061bb54
  Liping Zhang authored Sep 14, 2016
  8061bb54
- netfilter: nf_tables: validate maximum value of u32 netlink attributes · 36b701fa
  Laura Garcia Liebana authored Sep 14, 2016
  36b701fa
Sep 22, 2016
- netfilter: nft_numgen: add number generation offset · 2b03bf73
  Laura Garcia Liebana authored Sep 13, 2016
  2b03bf73
Sep 13, 2016
- netfilter: nft_hash: fix hash overflow validation · 14e2dee0
  Laura Garcia Liebana authored Sep 13, 2016
  14e2dee0
Sep 12, 2016
- netfilter: nft_numgen: fix race between num generate and store it · 2e917d60
  Liping Zhang authored Sep 12, 2016
  2e917d60
- netfilter: conntrack: remove packet hotpath stats · 8e8118f8
  Florian Westphal authored Sep 11, 2016
  8e8118f8
- netfilter: nf_queue: get rid of dependency on IP6_NF_IPTABLES · 6bd14303
  Liping Zhang authored Sep 11, 2016
  6bd14303
- netfilter: Add the missed return value check of nft_register_chain_type · 23d07508
  Gao Feng authored Sep 10, 2016
  23d07508
- netfilter: Add the missed return value check of register_netdevice_notifier · 4e6577de
  Gao Feng authored Sep 09, 2016
  4e6577de
- netfilter: nf_conntrack: simplify __nf_ct_try_assign_helper() return logic · cf71c03e
  Pablo Neira authored Sep 09, 2016
  cf71c03e
- netfilter: nf_tables: don't drop IPv6 packets that cannot parse transport · 71212c9b
  Pablo Neira Ayuso authored Sep 09, 2016
  71212c9b
- netfilter: nf_tables_bridge: use nft_set_pktinfo_ipv{4, 6}_validate · 10151d7b
  Pablo Neira Ayuso authored Sep 09, 2016
  10151d7b
- netfilter: introduce nft_set_pktinfo_{ipv4, ipv6}_validate() · ddc8b602
  Pablo Neira Ayuso authored Sep 09, 2016
  ddc8b602
- netfilter: nf_tables_ipv6: setup pktinfo transport field on failure to parse · 8df9e32e
  Pablo Neira Ayuso authored Sep 09, 2016
  8df9e32e
- netfilter: nf_tables: ensure proper initialization of nft_pktinfo fields · beac5afa
  Pablo Neira Ayuso authored Sep 09, 2016
  beac5afa
- netfilter: nft_dynset: allow to invert match criteria · dbd2be06
  Pablo Neira Ayuso authored Sep 07, 2016
  dbd2be06
- netfilter: nft_hash: Add hash offset value · 70ca767e
  Laura Garcia Liebana authored Sep 06, 2016
  70ca767e
Sep 09, 2016
- netfilter: nf_conntrack: remove unused ctl_table_path member in nf_conntrack_l3proto · 3c15b8e1
  Liping Zhang authored Sep 06, 2016
  3c15b8e1
- netfilter: nft_queue: check the validation of queues_total and queuenum · fe01111d
  Liping Zhang authored Sep 06, 2016
  fe01111d
Sep 07, 2016
- netfilter: nf_ct_sip: allow tab character in SIP headers · 1bcabc81
  Marco Angaroni authored Aug 30, 2016
  1bcabc81