aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2006-01-10[NETFILTER]: Fix another crash in ip_nat_pptpPatrick McHardy1-30/+27
2006-01-10[NETFILTER]: Fix crash in ip_nat_pptpPatrick McHardy1-1/+1
2006-01-10[NET]: Change memcmp(,,ETH_ALEN) to compare_ether_addr()Kris Katterjohn1-2/+3
2006-01-10spelling: s/trough/through/Adrian Bunk1-2/+2
2006-01-07[NETFILTER]: ip_conntrack_proto_sctp.c needs linux/interrupt.hJoe Kappus1-0/+1
2006-01-07[NETFILTER]: Add ipt_policy/ip6t_policy matchesPatrick McHardy3-0/+181
2006-01-07[NETFILTER]: Handle NAT in IPsec policy checksPatrick McHardy1-2/+48
2006-01-07[NETFILTER]: Redo policy lookups after NAT when neccessaryPatrick McHardy1-2/+25
2006-01-07[NETFILTER]: Use conntrack information to determine if packet was NATedPatrick McHardy1-15/+19
2006-01-06Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6Linus Torvalds1-0/+1
2006-01-06[NETFILTER]: ipt_helper.c needs linux/interrupt.hJoe1-0/+1
2006-01-06kbuild: un-stringnify KBUILD_MODNAMESam Ravnborg2-2/+2
2006-01-05[NETFILTER]: Use HOPLIMIT metric as TTL of TCP reset sent by REJECTYasuyuki Kozakai1-1/+1
2006-01-05[NETFILTER]: nf_conntrack_l3proto_ipv4.c needs net/route.hPatrick McHardy1-0/+1
2006-01-05[NETFILTER]: Call POST_ROUTING hook before fragmentationPatrick McHardy3-67/+2
2006-01-05[NETFILTER]: ctnetlink: Fix dumping of helper namePatrick McHardy1-1/+1
2006-01-05[NETFILTER]: Fix module_param types and permissionsPatrick McHardy6-25/+21
2006-01-05[NETFILTER]: Add ctnetlink port for nf_conntrackPablo Neira Ayuso2-18/+126
2006-01-05[NETFILTER]: ctnetlink: remove unused variablePablo Neira Ayuso1-2/+0
2006-01-05[NETFILTER]: ctnetlink: fix conntrack mark racePablo Neira Ayuso1-5/+5
2006-01-05[NETFILTER]: ctnetlink: ctnetlink_event cleanupPablo Neira Ayuso1-11/+4
2006-01-05[NETFILTER]: ctnetlink: use u_int32_t instead of unsigned intPablo Neira Ayuso1-1/+1
2006-01-05[NETFILTER]: ctnetlink: propagate ctnetlink_dump_tuples_proto return value backPablo Neira Ayuso1-2/+3
2006-01-05[NETFILTER]: ctnetlink: Add sanity checkings for ICMPYasuyuki Kozakai1-19/+24
2006-01-05[NETFILTER]: ctnetlink: remove bogus checks in ICMP protocol at dumpingPablo Neira Ayuso1-4/+0
2006-01-03[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.hArnaldo Carvalho de Melo7-0/+10
2006-01-03[NETFILTER] ip_tables: NUMA-aware allocationEric Dumazet2-118/+256
2005-12-19[NETFILTER]: Fix NAT init orderPatrick McHardy1-1/+2
2005-12-12[NETFILTER]: ip_nat_tftp: Fix expectation NATMarcus Sundberg1-1/+4
2005-12-05[NETFILTER]: Don't use conntrack entry after dropping the referencePatrick McHardy1-4/+2
2005-12-05[NETFILTER]: Fix unbalanced read_unlock_bh in ctnetlinkPatrick McHardy1-1/+2
2005-12-05[NETFILTER]: Mark ctnetlink as EXPERIMENTALPatrick McHardy1-4/+4
2005-12-05[NETFILTER]: Fix CTA_PROTO_NUM attribute size in ctnetlinkPatrick McHardy1-2/+2
2005-12-05[NETFILTER]: Fix ip_conntrack_flush abuse in ctnetlinkPatrick McHardy1-9/+11
2005-12-05[NETFILTER]: Fix incorrect argument to ip_nat_initialized() in ctnetlinkPablo Neira Ayuso1-1/+1
2005-12-01[NETFILTER]: Fix recent match jiffies wrap mismatchesPhil Oester1-0/+1
2005-12-01[NETFILTER]: Ignore ACKs ACKs on half open connections in TCP conntrackJozsef Kadlecsik1-9/+20
2005-11-29[NETFILTER] ipv4: small cleanupsAdrian Bunk3-4/+4
2005-11-29[NET]: Add const markers to various variables.Arjan van de Ven8-12/+12
2005-11-23[NETFILTER]: ip_conntrack_netlink.c needs linux/interrupt.hBenoit Boissinot1-0/+1
2005-11-22[NETFILTER] ctnetlink: Fix refcount leak ip_conntrack/nat_protoPablo Neira Ayuso1-12/+12
2005-11-20[NETFILTER]: fixed dependencies between modules related with ip_conntrackYasuyuki Kozakai1-5/+5
2005-11-17[NETFILTER] ip_conntrack: fix ftp/irc/tftp helpers on ports >= 32768Harald Welte3-6/+6
2005-11-14[NETFILTER] nfnetlink: unconditionally require CAP_NET_ADMINHarald Welte1-14/+7
2005-11-14[NETFILTER] ctnetlink: More thorough size checking of attributesPablo Neira Ayuso2-0/+46
2005-11-14[NETFILTER] ctnetlink: use size_t to make gcc-4.x happyPablo Neira Ayuso1-3/+3
2005-11-12[NETFILTER] {ip,nf}_conntrack TCP: Accept SYN+PUSH like SYNVlad Drukker1-0/+1
2005-11-10[NET]: Detect hardware rx checksum faults correctlyHerbert Xu1-7/+4
2005-11-09[NETFILTER]: Add nf_conntrack subsystem.Yasuyuki Kozakai13-58/+1106
2005-11-09[NETFILTER] ctnetlink: ICMP_ID is u_int16_t not u_int8_t.Krzysztof Piotr Oledzki1-1/+1
2005-11-09[NETFILTER] ctnetlink: Fix oops when no ICMP ID info in messageKrzysztof Piotr Oledzki1-1/+2
2005-11-09[NETFILTER] ctnetlink: Add support to identify expectations by ID'sPablo Neira Ayuso1-0/+8
2005-11-09[NETFILTER] ctnetlink: propagate error instaed of returning -EPERMPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER] ctnetlink: return -EINVAL if size is wrongPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER]: stop tracking ICMP error at early pointYasuyuki Kozakai1-5/+5
2005-11-09[NETFILTER] PPTP helper: fix PNS-PAC expectation call idPhilip Craig1-2/+26
2005-11-09[NETFILTER] ctnetlink: get_conntrack can use GFP_KERNELPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER] ctnetlink: kill unused includesPablo Neira Ayuso1-3/+0
2005-11-09[NETFILTER] ctnetlink: add module alias to fix autoloadingPablo Neira Ayuso1-0/+2
2005-11-09[NETFILTER] ctnetlink: add marking support from userspacePablo Neira Ayuso1-0/+10
2005-11-09[NETFILTER] ctnetlink: check if protoinfo is presentPablo Neira Ayuso1-0/+5
2005-11-09[NETFILTER] nfnetlink: nfattr_parse() can never fail, make it voidHarald Welte2-42/+9
2005-11-09[NETFILTER]: refcount leak of proto when ctnetlink dumping tupleYasuyuki Kozakai1-3/+6
2005-11-09[NETFILTER]: packet counter of conntrack is 32bitsYasuyuki Kozakai1-1/+1
2005-11-08[NET]: kfree cleanupJesper Juhl1-2/+1
2005-11-05[NETFILTER]: CONNMARK target needs ip_conntrackHarald Welte1-0/+1
2005-11-05[NETFILTER]: Fix double free after netlink_unicast() in ctnetlinkHarald Welte1-12/+7
2005-11-05[NETFILTER] NAT: Fix module refcount dropping too farHarald Welte2-5/+3
2005-11-04[NETFILTER] PPTP helper: Fix endianness bug in GRE key / CallID NATHarald Welte1-2/+2
2005-11-04[NETFILTER] PPTP helper: Fix compilation of conntrack helper without NATHarald Welte2-4/+2
2005-10-31[NETFILTER]: Add "revision" support to arp_tables and ip6_tablesHarald Welte1-70/+131
2005-10-30[PATCH] Typo fix: dot after newline in printk stringsJean Delvare1-1/+1
2005-10-26[NETFILTER] ip_conntrack: Make "hashsize" conntrack parameter writableHarald Welte1-37/+95
2005-10-13[NETFILTER]: Fix OOPSes on machines with discontiguous cpu numbering.David S. Miller2-11/+20
2005-10-10[NETFILTER] ctnetlink: add support to change protocol infoPablo Neira Ayuso1-0/+37
2005-10-10[NETFILTER] ctnetlink: allow userspace to change TCP statePablo Neira Ayuso1-0/+23
2005-10-10[NETFILTER]: Use only 32bit counters for CONNTRACK_ACCTHarald Welte2-9/+12
2005-10-10[NETFILTER] ctnetlink: add one nesting level for TCP statePablo Neira Ayuso1-0/+4
2005-10-10[NETFILTER] ctnetlink: ICMP ID is not mandatoryPablo Neira Ayuso1-2/+1
2005-10-10[NETFILTER] conntrack_netlink: Fix endian issue with status from userspaceHarald Welte1-1/+2
2005-10-10[NETFILTER] ipt_ULOG: Mark ipt_ULOG as OBSOLETEHarald Welte1-1/+6
2005-10-10[NETFILTER] PPTP helper: Add missing Kconfig dependencyHarald Welte1-0/+1
2005-10-04[NETFILTER]: Fix Kconfig typoHorst H. von Brand1-1/+1
2005-10-03[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnlHerbert Xu2-2/+2
2005-10-03[NET]: Fix packet timestamping.Herbert Xu2-4/+4
2005-09-26[NETFILTER]: Fix invalid module autoloading by splitting iptable_natHarald Welte4-34/+35
2005-09-24[NETFILTER] ip_conntrack: Update event cache when status changesHarald Welte3-1/+4
2005-09-24[NETFILTER]: Fix ip[6]t_NFQUEUE Kconfig dependencyHarald Welte2-1/+12
2005-09-22[NETFILTER] Fix conntrack event cache deadlock/oopsHarald Welte5-28/+28
2005-09-22[NETFILTER] Fix sparse endian warnings in pptp helperAlexey Dobriyan1-6/+8
2005-09-22[NETFILTER] fix DEBUG statement in PPTP helperHarald Welte1-1/+1
2005-09-19[NETFILTER]: Export ip_nat_port_{nfattr_to_range,range_to_nfattr}Harald Welte1-0/+2
2005-09-19[NETFILTER]: Rename misnamed functionPatrick McHardy3-5/+5
2005-09-19[NETFILTER]: Add new PPTP conntrack and NAT helperHarald Welte6-0/+1774
2005-09-18[NETFILTER]: Solve Kconfig dependency problemHarald Welte1-3/+1
2005-09-17[NETFILTER] Fix Kconfig dependencies for nfnetlink/ctnetlinkHarald Welte1-6/+10
2005-09-16[NETFILTER]: Fix oops in conntrack event cacheHarald Welte1-1/+4
2005-09-16[NETFILTER] CLUSTERIP: use a bitmap to store node responsibility dataKOVACS Krisztian1-82/+61
2005-09-16[NETFILTER] CLUSTERIP: introduce reference counting for entriesKOVACS Krisztian1-18/+62
2005-09-13[NETFILTER]: Fix DHCP + MASQUERADE problemPatrick McHardy1-0/+6
2005-09-13[NETFILTER]: Fix rcu race in ipt_REDIRECTPatrick McHardy1-6/+10
2005-09-13[NETFILTER]: Simplify netbios helperPatrick McHardy1-12/+7
2005-09-13[NETFILTER]: Use correct type for "ports" module parameterPatrick McHardy3-9/+9
2005-09-09[PATCH] files: lock-free fd look-upDipankar Sarma1-0/+1
2005-09-08[XFRM]: Always release dst_entry on error in xfrm_lookupPatrick McHardy1-4/+1
2005-09-08[NETFILTER]: ip_conntrack_netbios_ns.c gcc-2.95.x build fixAndrew Morton1-4/+20
2005-09-06[NETFILTER]: Missing unlock in TCP connection tracking error pathPatrick McHardy1-0/+1
2005-09-06[NETFILTER]: kill __ip_ct_expect_unlink_destroyPablo Neira Ayuso3-18/+16
2005-09-06[NETFILTER]: Don't increase master refcount on expectationsPablo Neira Ayuso1-4/+4
2005-09-06[NETFILTER]: Handle NAT module load racePatrick McHardy2-2/+27
2005-09-06[NETFILTER]: Fix CONNMARK Kconfig dependencyYasuyuki Kozakai1-0/+1
2005-09-06[NETFILTER]: Add NetBIOS name service helperPatrick McHardy3-0/+151
2005-09-06[NETFILTER]: Add support for permanent expectationsPatrick McHardy6-4/+13
2005-09-01[NETFILTER]: CLUSTERIP: fix memcpy() length typoKOVACS Krisztian1-1/+1
2005-08-29[NETFILTER]: Add new iptables TTL targetHarald Welte3-0/+134
2005-08-29[NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointersEric Dumazet2-3/+3
2005-08-29[LIB]: Make TEXTSEARCH_BM plain tristate like the othersDavid S. Miller1-0/+1
2005-08-29[NETFILTER]: Add goto targetPatrick McHardy1-2/+2
2005-08-29[NETFILTER]: Add string matchPablo Neira Ayuso3-0/+104
2005-08-29[NETLINK]: Add "groups" argument to netlink_kernel_createPatrick McHardy2-2/+3
2005-08-29[NETLINK]: Convert netlink users to use group numbers instead of bitmasksPatrick McHardy2-10/+10
2005-08-29[NETFILTER]: Remove tasklist_lock abuse in ipt{,6}ownerChristoph Hellwig1-125/+7
2005-08-29[NETFILTER]: Make NETMAP target usable in OUTPUTGary Wayne Smith1-3/+5
2005-08-29[NETFILTER]: Don't exclude local packets from MASQUERADINGPatrick McHardy1-5/+0
2005-08-29[NET]: Store skb->timestamp as offset to a base timestampPatrick McHardy2-6/+6
2005-08-29[NETFILTER]: Nicer names for ipt_connbytes constantsPatrick McHardy1-6/+6
2005-08-29[NETFILTER]: Fix div64_64 in ipt_connbytesPatrick McHardy1-14/+10
2005-08-29[NETFILTER]: Add new iptables "connbytes" matchHarald Welte3-1/+177
2005-08-29[NETFILTER]: New iptables DCCP protocol header matchHarald Welte3-0/+188
2005-08-29[NETFILTER]: return ENOMEM when ip_conntrack_alloc() fails.Yasuyuki Kozakai1-3/+4
2005-08-29[NETFILTER]: add /proc/net/netfilter interface to nf_queueHarald Welte1-2/+7
2005-08-29[NETFILTER]: ip{6}_queue: prevent unregistration race with nfnetlink_queueHarald Welte1-1/+1
2005-08-29[NETFILTER]: move conntrack helper buffers from BSS to kmalloc()ed memoryHarald Welte3-5/+29
2005-08-29[NETFILTER]: fix list traversal order in ctnetlinkPablo Neira Ayuso1-3/+3
2005-08-29[NETFILTER]: Fix typo in ctnl_exp_cb array (no bug, just memory waste)Pablo Neira Ayuso1-1/+1
2005-08-29[NETFILTER]: fix conntrack refcount leak in unlink_expect()Pablo Neira Ayuso1-0/+1
2005-08-29[NETFILTER]: ctnetlink: make sure event order is correctPablo Neira Ayuso1-1/+1
2005-08-29[NETFILTER]: don't use nested attributes for conntrack_expectHarald Welte1-46/+39
2005-08-29[NETFILTER]: attribute count is an attribute of message type, not subsytemHarald Welte1-2/+7
2005-08-29[NETFILTER]: fix ctnetlink 'create_expect' parsingHarald Welte1-1/+1
2005-08-29[NETFILTER]: conntrack_netlink: Fix locking during conntrack_createPablo Neira1-6/+7
2005-08-29[NETFILTER]: remove bogus memset() calls from ip_conntrack_netlink.cPablo Neira1-8/+0
2005-08-29[NETFILTER]: Fix multiple problems with the conntrack event cachePatrick McHardy2-69/+39
2005-08-29[NETFILTER]: Extend netfilter logging APIHarald Welte5-64/+90
2005-08-29[NETFILTER]: Add "nfnetlink_queue" netfilter queue handler over nfnetlinkHarald Welte3-1/+76
2005-08-29[NETFILTER]: Core changes required by upcoming nfnetlink_queue codeHarald Welte1-1/+2
2005-08-29[NETFILTER]: Move reroute-after-queue code up to the nf_queue layer.Harald Welte1-27/+0
2005-08-29[NETLINK]: Add properly module refcounting for kernel netlink sockets.Harald Welte2-2/+4
2005-08-29[NETFILTER]: Rename skb_ip_make_writable() to skb_make_writable()Harald Welte11-16/+16
2005-08-29[NETFILTER]: C99 initizalizers for NAT protocolsPatrick McHardy4-33/+40
2005-08-29[NETFILTER]: Add ctnetlink subsystemHarald Welte15-82/+2066
2005-08-29[NETFILTER]: connection tracking event notifiersHarald Welte8-10/+154
2005-08-29[NETFILTER]: reduce netfilter sk_buff enlargementHarald Welte13-29/+7
2005-08-29[NETFILTER]: convert nfmark and conntrack mark to 32bitHarald Welte6-5/+36
2005-08-23[NETFILTER]: Fix HW checksum handling in ip_queue/ip6_queuePatrick McHardy1-0/+7
2005-08-20[NETFILTER]: Fix HW checksum handling in TCPMSS targetPatrick McHardy1-3/+4
2005-08-20[NETFILTER]: Fix HW checksum handling in ECN targetPatrick McHardy1-4/+5
2005-08-20[NETFILTER]: Fix ECN target TCP markingPatrick McHardy1-4/+4
2005-08-08[PATCH] don't try to do any NAT on untracked connectionsHarald Welte1-0/+4
2005-07-30[NETFILTER] Inherit masq_index to slave connectionsHarald Welte1-0/+5
2005-07-27[NETFILTER]: Fix -Wunder error in ip_conntrack_core.cNick Sillik1-1/+1
2005-07-22[NETFILTER]: Use correct byteorder in ICMP NATPatrick McHardy1-3/+4
2005-07-22[NETFILTER]: Wait until all references to ip_conntrack_untracked are dropped ...Patrick McHardy1-0/+3
2005-07-22[NETFILTER]: Fix potential memory corruption in NAT code (aka memory NAT)Patrick McHardy2-2/+4
2005-07-21[NETFILTER]: ip_conntrack_expect_related must not free expectationRusty Russell10-57/+39
2005-07-12[NETFILTER]: Revert nf_reset changePhil Oester1-0/+7
2005-06-28[NETFILTER]: ipt_CLUSTERIP: fix ARP manglingHarald Welte1-3/+4
2005-06-22[NETFILTER]: Fix handling of ICMP packets (RELATED) in ipt_CLUSTERIP target.Harald Welte1-1/+1
2005-06-21[NETFILTER]: Check TCP checksum in ipt_REJECTPatrick McHardy1-1/+12
2005-06-21[NETFILTER]: Avoid unncessary checksum validation in UDP connection trackingKeir Fraser1-0/+1
2005-06-21[NETFILTER]: expectation timeouts are compulsoryPhil Oester1-9/+5
2005-06-21[NETFILTER]: Kill nf_debugPatrick McHardy2-12/+0
2005-06-21[NETFILTER]: Kill lockhelp.hPatrick McHardy18-167/+158
2005-06-15[NETFILTER]: ipt_recent: last_pkts is an array of "unsigned long" not "u_int3...David S. Miller1-5/+5
2005-06-13[NETFILTER]: Advance seq-file position in exp_next_seq()Patrick McHardy1-0/+1
2005-05-30[NETFILTER]: Fix deadlock with ip_queue and tcp local input path.Harald Welte1-0/+10
2005-05-19[NETFILTER]: Do not be clever about SKB ownership in ip_ct_gather_frags().David S. Miller1-20/+8
2005-05-03[NETLINK]: Synchronous message processing.Herbert Xu1-11/+9
2005-05-03[NETFILTER]: Don't checksum CHECKSUM_UNNECESSARY skbs in TCP connection trackingPatrick McHardy1-0/+1
2005-05-03[NETFILTER]: Missing owner-field initialization in iptable_rawPatrick McHardy1-2/+4
2005-04-25[NETFILTER]: Drop conntrack reference when packet leaves IPPatrick McHardy1-7/+0
2005-04-25[NETFILTER]: Fix truncated sequence numbers in FTP helperYasuyuki KOZAKAI1-2/+2
2005-04-24[NETFILTER]: Ignore PSH on SYN/ACK in TCP connection trackingPatrick McHardy1-0/+1
2005-04-24[NETFILTER]: Fix NAT sequence number adjustmentPatrick McHardy3-16/+98
2005-04-16Linux-2.6.12-rc2v2.6.12-rc2Linus Torvalds76-0/+23448