aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2006-10-04[NETFILTER]: Kconfig: fix xt_physdev dependenciesPatrick McHardy1-1/+1
2006-09-22[NETFILTER]: xt_limit: add compat conversion functionsPatrick McHardy1-0/+49
2006-09-22[NETFILTER]: xt_CONNMARK: add compat conversion functionsPatrick McHardy1-0/+36
2006-09-22[NETFILTER]: xt_connmark: add compat conversion functionsPatrick McHardy1-0/+36
2006-09-22[NETFILTER]: xt_MARK: add compat conversion functionsPatrick McHardy1-0/+34
2006-09-22[NETFILTER]: xt_mark: add compat conversion functionsPatrick McHardy1-0/+36
2006-09-22[NETFILTER]: x_tables: simplify compat APIPatrick McHardy1-83/+109
2006-09-22[NETFILTER]: make some netfilter globals __read_mostlyBrian Haley1-5/+5
2006-09-22[NETFILTER]: TCP conntrack: improve dead connection detectionGeorge Hansper1-1/+3
2006-09-22[NETFILTER]: xt_policy: remove dups in .familyAlexey Dobriyan1-2/+0
2006-09-22[NETFILTER]: conntrack: fix race condition in early_dropPablo Neira Ayuso1-2/+8
2006-09-22[NETFILTER]: ctnetlink: simplify the code to dump the conntrack tablePablo Neira Ayuso1-57/+10
2006-09-22[NETFILTER]: xt_limit: don't reset state on unrelated rule updatesPatrick McHardy1-8/+8
2006-09-22[NETFILTER]: xt_conntrack: clean up overly long linesPatrick McHardy1-81/+98
2006-09-22[NETFILTER]: kill listhelp.hPatrick McHardy3-107/+96
2006-09-22[NETFILTER]: Change tunables to __read_mostlyBrian Haley6-26/+26
2006-09-22[NETFILTER]: xt_CONNMARK.c build fixBenoit Boissinot1-2/+2
2006-09-22[NETFILTER]: Fix nf_conntrack_ftp.c build.David S. Miller1-1/+3
2006-09-22[NETFILTER] NF_CONNTRACK_FTP: Use in6_pton() to convert address string.YOSHIFUJI Hideaki1-92/+4
2006-09-22[NETFILTER]: x_tables: Fix typos after conversion to use mass registation helperThomas Graf2-5/+5
2006-09-22[NETFILTER]: xt_tcpmss: minor cleanupsPatrick McHardy1-30/+18
2006-09-22[NETFILTER]: x_tables: remove unused size argument to check/destroy functionsPatrick McHardy23-35/+10
2006-09-22[NETFILTER]: x_tables: remove unused argument to target functionsPatrick McHardy9-19/+11
2006-09-22[NETFILTER]: x_tables: make use of mass registation helpersPatrick McHardy31-1004/+678
2006-09-22[NETFILTER]: x_tables: add helpers for mass match/target registrationPatrick McHardy1-0/+60
2006-09-22[NETFILTER]: xt_CONNMARK: use tabs for indentationPatrick McHardy1-28/+29
2006-09-22[NETFILTER]: nfnetlink_queue: fix typo in error messagePatrick McHardy1-2/+2
2006-09-22[NETFILTER]: ctnetlink: remove impossible events tests for updatesPablo Neira Ayuso1-5/+1
2006-09-22[NETFILTER]: ctnetlink: check for listeners before sending expectation eventsPablo Neira Ayuso1-0/+3
2006-09-22[NETFILTER]: ctnetlink: dump connection markPablo Neira Ayuso1-0/+4
2006-09-22[NETFILTER]: conntrack: introduce connection mark eventPablo Neira Ayuso1-2/+14
2006-09-22[NETFILTER]: x_tables: replace IPv4 DSCP target by address family independent...Yasuyuki Kozakai3-0/+143
2006-09-22[NETFILTER]: x_tables: replace IPv4 dscp match by address family independent ...Yasuyuki Kozakai3-0/+125
2006-09-22[NETFILTER]: nf_queue: handle GSO packetsPatrick McHardy3-22/+62
2006-09-22[NETFILTER]: Get rid of HW checksum invalidationPatrick McHardy1-0/+22
2006-09-22[NET]: Replace CHECKSUM_HW by CHECKSUM_PARTIAL/CHECKSUM_COMPLETEPatrick McHardy3-7/+5
2006-09-19[NETFILTER]: xt_quota: add missing module aliasesPatrick McHardy1-0/+2
2006-08-17[NETFILTER]: ctnetlink: fix deadlock in table dumpingPatrick McHardy1-10/+7
2006-08-17[NETFILTER]: xt_physdev build fixAndrew Morton1-0/+1
2006-08-13[NETFILTER]: ulog: fix panic on SMP kernelsMark Huang1-0/+3
2006-08-13[NETFILTER]: xt_string: fix negationPhil Oester1-1/+1
2006-08-02[NETFILTER]: xt_hashlimit/xt_string: missing string validationPatrick McHardy1-1/+4
2006-08-02[SECURITY] secmark: nul-terminate secdataJames Morris1-0/+2
2006-07-24[NETFILTER]: Demote xt_sctp to EXPERIMENTALPatrick McHardy1-2/+2
2006-07-24[NETFILTER]: bridge netfilter: add deferred output hooks to feature-removal-s...Patrick McHardy1-0/+15
2006-07-24[NETFILTER]: xt_pkttype: fix mismatches on locally generated packetsPhil Oester1-1/+11
2006-07-24[NETFILTER]: conntrack: fix SYSCTL=n compileAdrian Bunk1-2/+2
2006-07-24[NETFILTER]: nf_queue: handle NF_STOP and unknown verdicts in nf_reinjectPatrick McHardy1-5/+4
2006-06-30Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6Linus Torvalds1-1/+1
2006-06-30[NETFILTER]: SCTP conntrack: fix crash triggered by packet without chunksPatrick McHardy1-1/+1
2006-06-30Remove obsolete #include <linux/config.h>Jörn Engel13-13/+0
2006-06-29[NETLINK]: Encapsulate eff_cap usage within security framework.Darrel Goeddel1-1/+1
2006-06-29[NETFILTER]: statistic match: add missing Kconfig help textPatrick McHardy1-1/+4
2006-06-29[NETFILTER]: ip_queue/nfnetlink_queue: drop bridge port references when dev d...Patrick McHardy1-2/+10
2006-06-29[NETFILTER]: xt_sctp: fix --chunk-types matchingJorge Matias1-1/+1
2006-06-29[NETFILTER]: xt_tcpudp: fix double unregistration in error pathYuri Gushin1-1/+1
2006-06-29[NETFILTER]: nf_conntrack: Fix undefined references to local_bh_*Yasuyuki Kozakai2-0/+3
2006-06-19[NETFILTER]: xt_sctp: fix endless loop caused by 0 chunk lengthPatrick McHardy1-1/+1
2006-06-17[SECMARK]: Add CONNSECMARK xtables targetJames Morris3-0/+167
2006-06-17[SECMARK]: Add secmark support to conntrackJames Morris3-0/+20
2006-06-17[SECMARK]: Add xtables SECMARK targetJames Morris3-0/+166
2006-06-17[NETFILTER]: FTP helper: search optimizationPatrick McHardy1-34/+43
2006-06-17[NETFILTER]: ctnetlink: change table dumping not to require an unique IDPatrick McHardy1-8/+24
2006-06-17[NETFILTER]: ctnetlink: fix NAT configurationPatrick McHardy1-31/+22
2006-06-17[NETFILTER]: conntrack: add fixed timeout flag in connection trackingEric Leblond1-0/+6
2006-06-17[NETFILTER]: conntrack: add sysctl to disable checksummingPatrick McHardy3-3/+16
2006-06-17[NETFILTER]: x_tables: add statistic matchPatrick McHardy3-0/+119
2006-06-17[NETFILTER]: x_tables: add quota matchPatrick McHardy3-0/+107
2006-06-17[NETFILTER]: x_tables: add SCTP/DCCP support where missingPatrick McHardy1-3/+4
2006-06-17[NETFILTER]: x_tables: remove some unnecessary castsPatrick McHardy5-8/+5
2006-05-19[NETFILTER]: nfnetlink_log: fix byteorder confusionPatrick McHardy1-2/+2
2006-05-03[NETFILTER]: x_tables: don't use __copy_{from,to}_user on unchecked memory in...Patrick McHardy1-2/+2
2006-05-02[NETFILTER] SCTP conntrack: fix infinite loopPatrick McHardy1-4/+7
2006-04-24[NETFILTER]: x_tables: move table->lock initializationDmitry Mishin1-1/+1
2006-04-24[NETFILTER]: nf_conntrack: kill unused callback init_conntrackYasuyuki Kozakai1-3/+0
2006-04-24[NETFILTER]: nf_conntrack: Fix module refcount dropping too farYasuyuki Kozakai2-9/+4
2006-04-11[PATCH] for_each_possible_cpu: network codesKAMEZAWA Hiroyuki2-3/+3
2006-04-09[NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functionsPatrick McHardy2-90/+10
2006-04-09[NETFILTER]: Introduce infrastructure for address family specific operationsPatrick McHardy2-36/+36
2006-04-09[NETFILTER]: Fix section mismatch warningsPatrick McHardy3-94/+73
2006-04-09[NETFILTER]: Add helper functions for mass hook registration/unregistrationPatrick McHardy1-0/+28
2006-04-01[NETFILTER]: iptables 32bit compat layerDmitry Mishin1-0/+113
2006-04-01[NETFILTER]: {ip,nf}_conntrack_netlink: fix expectation notifier unregistrationMartin Josefsson1-1/+1
2006-04-01[NETFILTER]: fix ifdef for connmark support in nf_conntrack_netlinkMartin Josefsson1-2/+2
2006-04-01[NETFILTER]: x_tables: unify IPv4/IPv6 multiport matchYasuyuki Kozakai3-0/+325
2006-04-01[NETFILTER]: x_tables: unify IPv4/IPv6 esp matchYasuyuki Kozakai3-0/+146
2006-04-01[IPSEC]: Kill unused decap state structureHerbert Xu1-1/+1
2006-03-28[NETFILTER]: Rename init functions.Andrew Morton28-113/+113
2006-03-27[PATCH] Notifier chain update: API changesAlan Stern1-3/+3
2006-03-25[NETFILTER] x_table.c: sem2mutexIngo Molnar1-27/+29
2006-03-22[NETFILTER]: Fix xt_policy address matchingPatrick McHardy1-3/+3
2006-03-22[NETFILTER]: nf_conntrack: support for layer 3 protocol load on demandPablo Neira Ayuso6-0/+124
2006-03-22[NETFILTER]: x_tables: set the protocol family in x_tables targets/matchesPablo Neira Ayuso25-133/+187
2006-03-22[NETFILTER]: conntrack: cleanup the conntrack ID initializationPablo Neira Ayuso1-2/+2
2006-03-22[NETFILTER]: nfnetlink_queue: fix nfnetlink message sizePablo Neira Ayuso1-9/+10
2006-03-22[NETFILTER]: ctnetlink: Fix expectaction mask dumpingPablo Neira Ayuso1-22/+62
2006-03-22[NETFILTER]: Fix Kconfig typosThomas Vögtle1-3/+3
2006-03-20[NET]: Identation & other cleanups related to compat_[gs]etsockopt csetArnaldo Carvalho de Melo1-1/+1
2006-03-20[NET]: {get|set}sockopt compatibility layerDmitry Mishin1-0/+69
2006-03-20[NET]: sem2mutex part 2Ingo Molnar1-7/+9
2006-03-20[NET] sem2mutex: net/Arjan van de Ven1-12/+13
2006-03-20[NETFILTER]: ctnetlink: avoid unneccessary event message generationPatrick McHardy2-3/+10
2006-03-20[NETFILTER]: x_tables: replace IPv4/IPv6 policy match by address family indep...Patrick McHardy3-0/+220
2006-03-20[NETFILTER]: x_tables: add xt_{match,target} arguments to match/target functionsPatrick McHardy23-1/+44
2006-03-20[NETFILTER]: Convert x_tables matches/targets to centralized error checkingPatrick McHardy23-511/+167
2006-03-20[NETFILTER]: xt_tables: add centralized error checkingPatrick McHardy1-7/+65
2006-03-20[NETFILTER] nf_conntrack: clean up to reduce size of 'struct nf_conn'Harald Welte5-89/+80
2006-03-20[NETFILTER] nfnetlink_log: add sequence numbers for log eventsHarald Welte1-0/+46
2006-03-12[NETFILTER]: nfnetlink_queue: fix possible NULL-ptr dereferencePatrick McHardy1-1/+5
2006-02-27[NETFILTER]: nf_queue: fix end-of-list checkPatrick McHardy1-1/+1
2006-02-27[NETFILTER]: nf_queue: remove unnecessary check for outfnPatrick McHardy1-1/+1
2006-02-27[NETFILTER]: nf_queue: fix rerouting after packet manglingPatrick McHardy1-7/+15
2006-02-27[NETFILTER]: nf_queue: check if rerouter is present before using itPatrick McHardy1-2/+2
2006-02-27[NETFILTER]: nf_queue: don't copy registered rerouter dataPatrick McHardy1-19/+9
2006-02-15[NETFILTER]: nf_conntrack: Fix TCP/UDP HW checksum handling for IPv6 packetYasuyuki Kozakai2-2/+6
2006-02-15[NETFILTER]: nf_conntrack: move registration of __nf_ct_attachYasuyuki Kozakai1-0/+5
2006-02-15[NETFILTER]: x_tables: fix dependencies of conntrack related modulesYasuyuki Kozakai1-3/+3
2006-02-13[NETFILTER] Fix Kconfig menu level for x_tablesHarald Welte1-2/+2
2006-02-04[NETFILTER]: nf_conntrack: fix incorrect memset() size in FTP helperSamir Bellabes1-2/+0
2006-02-04[NETFILTER]: nfnetlink_queue: fix packet marking over netlinkPatrick McHardy1-1/+2
2006-02-04[NETFILTER]: Fix undersized skb allocation in ipt_ULOG/ebt_ulog/nfnetlink_logPatrick McHardy1-7/+11
2006-02-04[NETFILTER]: ULOG/nfnetlink_log: Use better default value for 'nlbufsiz'Holger Eitzenberger1-1/+1
2006-02-04[NETFILTER]: nf_conntrack: check address family when finding protocol moduleYasuyuki Kozakai1-1/+1
2006-02-04[NETFILTER]: ctnetlink: add MODULE_ALIAS for expectation subsystemPablo Neira Ayuso1-0/+1
2006-02-04[NETFILTER]: ctnetlink: Fix subsystem used for expectation eventsMarcus Sundberg1-1/+1
2006-01-14[PATCH] Unlinline a bunch of other functionsArjan van de Ven1-1/+1
2006-01-13[NETFILTER] x-tables: Missing linux/ipv6.h includes.David S. Miller2-0/+2
2006-01-13[NET]: Use NIP6_FMT in kernel.hJoe Perches1-2/+2
2006-01-12[NETFILTER] x_tables: Abstraction layer for {ip,ip6,arp}_tablesHarald Welte27-5/+4316
2006-01-10[NETFILTER]: Fix timeout sysctls on big-endian 64bit architecturesPatrick McHardy5-34/+34
2006-01-10spelling: s/trough/through/Adrian Bunk1-2/+2
2006-01-05[NETFILTER]: Fix module_param types and permissionsPatrick McHardy1-1/+1
2006-01-05[NETFILTER]: Filter dumped entries based on the layer 3 protocol numberPablo Neira Ayuso1-6/+17
2006-01-05[NETFILTER]: Add ctnetlink port for nf_conntrackPablo Neira Ayuso7-34/+1973
2006-01-05[NETFILTER]: Decrease number of pointer derefs in nf_conntrack_core.cJesper Juhl1-3/+4
2006-01-05[NETFILTER]: Decrease number of pointer derefs in nfnetlink_queue.cJesper Juhl1-35/+44
2006-01-04[NETFILTER]: Use macro for spinlock_t/rwlock_t initializations/definition.YOSHIFUJI Hideaki2-2/+2
2005-12-05[NETFILTER]: Wait for untracked references in nf_conntrack module unloadPatrick McHardy1-0/+3
2005-12-05[NETFILTER]: Mark ctnetlink as EXPERIMENTALPatrick McHardy1-2/+2
2005-12-05[NETFILTER]: nfnetlink: Fix calculation of minimum message lengthYasuyuki Kozakai1-3/+2
2005-12-01[NETFILTER]: Ignore ACKs ACKs on half open connections in TCP conntrackJozsef Kadlecsik1-9/+20
2005-11-16[NETFILTER]: Fix nf_conntrack compilation with CONFIG_NETFILTER_DEBUGPatrick McHardy1-1/+1
2005-11-15[NETFILTER] Free layer-3 specific protocol tables at cleanupKOVACS Krisztian1-0/+7
2005-11-15[NETFILTER] Remove nf_conntrack stat proc file when cleaning upKOVACS Krisztian1-1/+1
2005-11-14[NETFILTER] nfnetlink: unconditionally require CAP_NET_ADMINHarald Welte3-26/+17
2005-11-14[NETFILTER] nf_conntrack: Add missing code to TCP conntrack moduleKOVACS Krisztian1-0/+6
2005-11-12[NETFILTER] {ip,nf}_conntrack TCP: Accept SYN+PUSH like SYNVlad Drukker1-0/+1
2005-11-09[NETFILTER]: Add nf_conntrack subsystem.Yasuyuki Kozakai10-0/+5418
2005-11-09[NETFILTER] nfnetlink: only load subsystems if CAP_NET_ADMIN is setHarald Welte1-7/+10
2005-11-09[NETFILTER] nfnetlink: nfattr_parse() can never fail, make it voidHarald Welte1-3/+1
2005-11-05[NETFILTER] nf_queue: Fix Ooops when no queue handler registeredHarald Welte1-1/+1
2005-11-05[NETFILTER] nfnetlink: Use kzallocHarald Welte2-8/+4
2005-10-10[NETFILTER] nfnetlink: use highest bit of nfa_type to indicate nested TLVHarald Welte1-2/+2
2005-10-08[PATCH] gfp flags annotations - part 1Al Viro1-2/+1
2005-10-04[NETFILTER]: fix sparse gfp nocast warningsRandy Dunlap1-1/+2
2005-10-03[NET]: Fix packet timestamping.Herbert Xu2-4/+4
2005-09-06[NETFILTER]: Fix HW checksum handling in nfnetlink_queuePatrick McHardy1-1/+7
2005-09-05[NETFILTER] remove bogus hand-coded htonll() from nenetlink_queueHarald Welte1-13/+2
2005-09-05[NETFILTER]: net/netfilter/nfnetlink*: make functions staticAdrian Bunk2-3/+3
2005-08-29[NETLINK]: Add "groups" argument to netlink_kernel_createPatrick McHardy1-2/+2
2005-08-29[NETLINK]: Convert netlink users to use group numbers instead of bitmasksPatrick McHardy1-1/+1
2005-08-29[NET]: Store skb->timestamp as offset to a base timestampPatrick McHardy2-6/+6
2005-08-29[NETFILTER]: Fix compilation when no PROC_FS enabledHarald Welte1-2/+2
2005-08-29[NETFILTER]: check nf_log function call argumentsHarald Welte1-1/+9
2005-08-29[NETFILTER]: more verbose return codes from nf_{log,queue}Harald Welte2-2/+10
2005-08-29[NETFILTER]: add /proc/net/netfilter interface to nf_queueHarald Welte3-25/+94
2005-08-29[NETFILTER]: add correct bridging support to nfnetlink_{queue,log}Harald Welte2-0/+116
2005-08-29[NETFILTER]: split net/core/netfilter.c into net/netfilter/*.cHarald Welte6-0/+829
2005-08-29[NETFILTER]: fix autoloading of nfnetlink_logHarald Welte1-0/+1
2005-08-29[NETFILTER]: cleanup nfnetlink_check_attributes()Harald Welte1-9/+10
2005-08-29[NETFILTER]: attribute count is an attribute of message type, not subsytemHarald Welte3-7/+22
2005-08-29[NETFILTER]: Add new "nfnetlink_log" userspace packet logging facilityHarald Welte4-0/+1008
2005-08-29[NETFILTER]: Add refcounting and /proc/net/netfilter interface to nfnetlink_q...Harald Welte1-28/+220
2005-08-29[NETFILTER]: Add "nfnetlink_queue" netfilter queue handler over nfnetlinkHarald Welte3-0/+886
2005-08-29[NETFILTER]: Core changes required by upcoming nfnetlink_queue codeHarald Welte1-6/+22
2005-08-29[NETLINK]: Add properly module refcounting for kernel netlink sockets.Harald Welte1-1/+4
2005-08-29[NETFILTER]: Add ctnetlink subsystemHarald Welte1-0/+1
2005-08-29[NETFITLER]: Add nfnetlink layer.Harald Welte3-0/+349