aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2006-09-24[PATCH] fix iptables __user misannotationsAl Viro1-3/+3
2006-09-22[NETFILTER]: PPTP conntrack: fix another GRE keymap leakPatrick McHardy2-10/+7
2006-09-22[NETFILTER]: PPTP conntrack: fix GRE keymap leakPatrick McHardy1-0/+1
2006-09-22[NETFILTER]: PPTP conntrack: fix PPTP_IN_CALL message typesPatrick McHardy2-6/+8
2006-09-22[NETFILTER]: PPTP conntrack: check call ID before changing statePatrick McHardy1-19/+13
2006-09-22[NETFILTER]: PPTP conntrack: clean up debugging cruftPatrick McHardy1-77/+51
2006-09-22[NETFILTER]: PPTP conntrack: consolidate header parsingPatrick McHardy1-72/+47
2006-09-22[NETFILTER]: PPTP conntrack: consolidate header size checksPatrick McHardy1-43/+22
2006-09-22[NETFILTER]: PPTP conntrack: simplify expectation handlingPatrick McHardy2-116/+34
2006-09-22[NETFILTER]: PPTP conntrack: remove unnecessary cid/pcid header pointersPatrick McHardy1-28/+28
2006-09-22[NETFILTER]: PPTP conntrack: fix header definitionsPatrick McHardy1-1/+1
2006-09-22[NETFILTER]: PPTP conntrack: remove more dead codePatrick McHardy1-15/+2
2006-09-22[NETFILTER]: PPTP conntrack: remove dead codePatrick McHardy1-14/+2
2006-09-22[NETFILTER]: PPTP conntrack: get rid of unnecessary byte order conversionsPatrick McHardy3-33/+33
2006-09-22[NETFILTER]: PPTP conntrack: fix whitespace errorsPatrick McHardy4-108/+108
2006-09-22[NETFILTER]: ipt_hashlimit: add compat conversion functionsPatrick McHardy1-0/+29
2006-09-22[NETFILTER]: x_tables: simplify compat APIPatrick McHardy1-91/+24
2006-09-22[NETFILTER]: ip_tables: revision support for compat codePatrick McHardy1-2/+3
2006-09-22[NETFILTER]: ip_tables: fix module refcount leaks in compat error pathsPatrick McHardy1-12/+27
2006-09-22[NETFILTER]: make some netfilter globals __read_mostlyBrian Haley2-7/+7
2006-09-22[NETFILTER]: TCP conntrack: improve dead connection detectionGeorge Hansper1-1/+3
2006-09-22[NETFILTER]: ipt_TTL: fix checksum update bugPatrick McHardy1-2/+2
2006-09-22[NETFILTER]: conntrack: fix race condition in early_dropPablo Neira Ayuso1-3/+6
2006-09-22[NETFILTER]: ctnetlink: simplify the code to dump the conntrack tablePablo Neira Ayuso1-53/+10
2006-09-22[NETFILTER]: x_tables: small check_entry & module_refcount cleanupDmitry Mishin2-2/+2
2006-09-22[NETFILTER]: ipt_TCPMSS: misc cleanupPatrick McHardy1-34/+2
2006-09-22[NETFILTER]: ipt_TCPMSS: remove impossible conditionPatrick McHardy1-7/+0
2006-09-22[NETFILTER]: ipt_TCPMSS: reformatPatrick McHardy1-27/+31
2006-09-22[NETFILTER]: kill listhelp.hPatrick McHardy8-136/+96
2006-09-22[NETFILTER]: Change tunables to __read_mostlyBrian Haley9-30/+30
2006-09-22[NETFILTER]: x_tables: remove unused size argument to check/destroy functionsPatrick McHardy21-44/+11
2006-09-22[NETFILTER]: x_tables: remove unused argument to target functionsPatrick McHardy20-46/+28
2006-09-22[NETFILTER]: replace open coded checksum updatesPatrick McHardy3-33/+20
2006-09-22[NETFILTER]: ctnetlink: remove impossible events tests for updatesPablo Neira Ayuso1-5/+1
2006-09-22[NETFILTER]: ctnetlink: check for listeners before sending expectation eventsPablo Neira Ayuso1-0/+3
2006-09-22[NETFILTER]: ctnetlink: dump connection markPablo Neira Ayuso1-0/+4
2006-09-22[NETFILTER]: ipt_recent: add module parameter for changing ownership of /proc...Daniel De Graaf1-0/+8
2006-09-22[NETFILTER]: x_tables: replace IPv4 DSCP target by address family independent...Yasuyuki Kozakai3-108/+0
2006-09-22[NETFILTER]: x_tables: replace IPv4 dscp match by address family independent ...Yasuyuki Kozakai3-66/+0
2006-09-22[NET]: Remove unnecessary config.h includes from net/Dave Jones1-1/+0
2006-09-22[NETFILTER]: Get rid of HW checksum invalidationPatrick McHardy10-109/+106
2006-09-22[NET]: Replace CHECKSUM_HW by CHECKSUM_PARTIAL/CHECKSUM_COMPLETEPatrick McHardy6-15/+16
2006-09-22[NETFILTER]: netbios conntrack: fix compilePatrick McHardy1-0/+1
2006-09-22[MLSXFRM]: Add flow labelingVenkat Yekkirala1-0/+1
2006-08-22[NETFILTER]: arp_tables: fix table locking in arpt_do_tablePatrick McHardy1-1/+2
2006-08-17[NETFILTER]: ip_tables: fix table locking in ipt_do_tablePatrick McHardy1-1/+2
2006-08-17[NETFILTER]: ctnetlink: fix deadlock in table dumpingPatrick McHardy1-10/+7
2006-08-13[NETFILTER]: ulog: fix panic on SMP kernelsMark Huang1-0/+5
2006-08-13[NETFILTER]: {arp,ip,ip6}_tables: proper error recovery in init pathPatrick McHardy2-15/+45
2006-08-13[NETFILTER]: xt_hashlimit: fix limit off-by-onePatrick McHardy1-7/+4
2006-08-02[NETFILTER]: xt_hashlimit/xt_string: missing string validationPatrick McHardy1-0/+3
2006-08-02[NETFILTER]: SIP helper: expect RTP streams in both directionsPatrick McHardy1-1/+1
2006-07-24[NETFILTER]: SNMP NAT: fix byteorder confusionPatrick McHardy1-2/+2
2006-07-24[NETFILTER]: conntrack: fix SYSCTL=n compileAdrian Bunk1-2/+2
2006-07-24[NETFILTER]: H.323 helper: fix possible NULL-ptr dereferencePatrick McHardy1-1/+1
2006-07-21[NET]: Conversions from kmalloc+memset to k(z|c)alloc.Panagiotis Issaris1-2/+1
2006-06-30Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6Linus Torvalds1-1/+1
2006-06-30[NETFILTER]: SCTP conntrack: fix crash triggered by packet without chunksPatrick McHardy1-1/+1
2006-06-30Remove obsolete #include <linux/config.h>Jörn Engel22-22/+0
2006-06-29[NETFILTE] ipv4: Fix typo (Bugzilla #6753)Matt LaPlante1-1/+1
2006-06-29[NETLINK]: Encapsulate eff_cap usage within security framework.Darrel Goeddel1-1/+1
2006-06-29[NETFILTER]: ip_queue/nfnetlink_queue: drop bridge port references when dev d...Patrick McHardy1-2/+10
2006-06-29[NETFILTER]: x_tables: fix xt_register_table error propagationPatrick McHardy2-2/+4
2006-06-25[PATCH] remove for_each_cpu()Andrew Morton1-1/+1
2006-06-17[NETFILTER]: hashlimit match: fix random initializationPatrick McHardy1-2/+5
2006-06-17[NETFILTER]: recent match: missing refcnt initializationPatrick McHardy1-0/+1
2006-06-17[NETFILTER]: recent match: fix "sleeping function called from invalid context"Patrick McHardy1-5/+10
2006-06-17[SECMARK]: Add secmark support to conntrackJames Morris3-0/+20
2006-06-17[SECMARK]: Add secmark support to core networking.James Morris1-0/+1
2006-06-17[NETFILTER]: PPTP helper: fixup gre_keymap_lookup() return typeAlexey Dobriyan1-3/+3
2006-06-17[NETFILTER]: Add SIP connection tracking helperPatrick McHardy4-0/+740
2006-06-17[NETFILTER]: H.323 helper: replace internal_net_addr parameter by routing-bas...Patrick McHardy1-30/+27
2006-06-17[NETFILTER]: H.323 helper: Add support for Call ForwardingJing Min Zhao4-7/+196
2006-06-17[NETFILTER]: amanda helper: convert to textsearch infrastructurePatrick McHardy2-49/+96
2006-06-17[NETFILTER]: FTP helper: search optimizationPatrick McHardy1-34/+43
2006-06-17[NETFILTER]: SNMP helper: fix debug module param typePatrick McHardy1-1/+1
2006-06-17[NETFILTER]: ctnetlink: change table dumping not to require an unique IDPatrick McHardy1-8/+24
2006-06-17[NETFILTER]: ctnetlink: fix NAT configurationPatrick McHardy1-31/+22
2006-06-17[NETFILTER]: conntrack: add fixed timeout flag in connection trackingEric Leblond1-0/+6
2006-06-17[NETFILTER]: conntrack: add sysctl to disable checksummingPatrick McHardy5-4/+15
2006-06-17[NETFILTER]: conntrack: don't call helpers for related ICMP messagesPatrick McHardy2-2/+2
2006-06-17[NETFILTER]: recent match: replace by rewritten versionPatrick McHardy1-891/+377
2006-06-17[NETFILTER]: x_tables: add SCTP/DCCP support where missingPatrick McHardy2-62/+22
2006-06-17[NETFILTER]: x_tables: remove some unnecessary castsPatrick McHardy1-1/+1
2006-05-28[NETFILTER]: PPTP helper: fix sstate/cstate typoAlexey Dobriyan1-2/+2
2006-05-28[NETFILTER]: mark H.323 helper experimentalPatrick McHardy1-2/+2
2006-05-28[NETFILTER]: Fix small information leak in SO_ORIGINAL_DST (CVE-2006-1343)Marcel Holtmann2-0/+2
2006-05-23[NETFILTER]: SNMP NAT: fix memleak in snmp_object_decodeChris Wright1-0/+1
2006-05-23[NETFILTER]: H.323 helper: fix sequence extension parsingPatrick McHardy1-1/+1
2006-05-23[NETFILTER]: H.323 helper: fix parser error propagationPatrick McHardy1-15/+19
2006-05-22[NETFILTER]: SNMP NAT: fix memory corruptionPatrick McHardy1-8/+7
2006-05-19[NETFILTER]: Fix do_add_counters race, possible oops or info leak (CVE-2006-0...Solar Designer1-1/+1
2006-05-19[NETFILTER]: GRE conntrack: fix htons/htonl confusionAlexey Dobriyan1-6/+6
2006-05-19[NETFILTER]: fix format specifier for netfilter log targetsPhilip Craig1-1/+1
2006-05-19[NETFILTER]: Fix memory leak in ipt_recentJesper Juhl1-1/+1
2006-05-03[NETFILTER]: x_tables: don't use __copy_{from,to}_user on unchecked memory in...Patrick McHardy1-3/+3
2006-05-03[NETFILTER]: H.323 helper: Change author's email addressJing Min Zhao1-1/+1
2006-05-03[NETFILTER]: NAT: silence unused variable warnings with CONFIG_XFRM=nPatrick McHardy1-0/+2
2006-05-03[NETFILTER]: H.323 helper: fix use of uninitialized dataPatrick McHardy1-4/+4
2006-05-03[NETFILTER]: H.323 helper: fix endless loop caused by invalid TPKT lenPatrick McHardy1-0/+2
2006-05-02[NETFILTER] SCTP conntrack: fix infinite loopPatrick McHardy1-4/+7
2006-05-01[NETFILTER] x_tables: fix compat related crash on non-x86Patrick McHardy1-19/+14
2006-04-24[NETFILTER]: ULOG target is not obsoleteThomas Voegtle1-1/+1
2006-04-11[PATCH] for_each_possible_cpu: network codesKAMEZAWA Hiroyuki3-5/+5
2006-04-09[NETFILTER]: Fix DNAT in LOCAL_OUTPatrick McHardy1-1/+1
2006-04-09[NETFILTER]: H.323 helper: remove changelogPatrick McHardy2-49/+0
2006-04-09[NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functionsPatrick McHardy5-53/+13
2006-04-09[NETFILTER]: Fix IP_NF_CONNTRACK_NETLINK dependencyPatrick McHardy1-0/+1
2006-04-09[NETFILTER]: H.323 helper: add parameter 'default_rrq_ttl'Jing Min Zhao1-1/+5
2006-04-09[NETFILTER]: H.323 helper: make get_h245_addr() staticJing Min Zhao1-2/+2
2006-04-09[NETFILTER]: H.323 helper: change EXPORT_SYMBOL to EXPORT_SYMBOL_GPLJing Min Zhao1-12/+11
2006-04-09[NETFILTER]: H.323 helper: move some function prototypes to ip_conntrack_h323.hJing Min Zhao5-1092/+1
2006-04-09[NETFILTER]: Fix section mismatch warningsPatrick McHardy5-118/+97
2006-04-09[NETFILTER]: Clean up hook registrationPatrick McHardy7-421/+199
2006-04-01[NETFILTER]: iptables 32bit compat layerDmitry Mishin1-131/+1007
2006-04-01[NETFILTER]: {ip,nf}_conntrack_netlink: fix expectation notifier unregistrationMartin Josefsson1-1/+1
2006-04-01[NETFILTER]: x_tables: unify IPv4/IPv6 multiport matchYasuyuki Kozakai3-206/+0
2006-04-01[NETFILTER]: x_tables: unify IPv4/IPv6 esp matchYasuyuki Kozakai3-116/+5
2006-03-28[NETFILTER]: Rename init functions.Andrew Morton49-200/+200
2006-03-27[PATCH] Notifier chain update: API changesAlan Stern1-3/+3
2006-03-26[PATCH] sem2mutex: misc static one-file mutexesIngo Molnar1-4/+5
2006-03-24[PATCH] s/;;/;/gAlexey Dobriyan1-1/+1
2006-03-22[NETFILTER]: Fix undefined references to get_h225_addrPatrick McHardy1-2/+2
2006-03-22[NETFILTER]: nf_conntrack: support for layer 3 protocol load on demandPablo Neira Ayuso1-0/+1
2006-03-22[NETFILTER]: x_tables: set the protocol family in x_tables targets/matchesPablo Neira Ayuso2-8/+13
2006-03-22[NETFILTER]: conntrack: cleanup the conntrack ID initializationPablo Neira Ayuso1-2/+2
2006-03-22[NETFILTER]: ctnetlink: Fix expectaction mask dumpingPablo Neira Ayuso1-17/+55
2006-03-20[NETFILTER]: Add H.323 conntrack/NAT helperJing Min Zhao8-0/+6199
2006-03-20[NETFILTER]: Fix warnings in ip_nat_snmp_basic.cDavid S. Miller1-1/+4
2006-03-20[NET]: sem2mutex part 2Ingo Molnar2-2/+2
2006-03-20[NET] sem2mutex: net/Arjan van de Ven1-5/+6
2006-03-20[NETFILTER]: Fix skb->nf_bridge lifetime issuesPatrick McHardy1-4/+0
2006-03-20[NETFILTER]: ctnetlink: avoid unneccessary event message generationPatrick McHardy1-3/+4
2006-03-20[NETFILTER]: x_tables: replace IPv4/IPv6 policy match by address family indep...Patrick McHardy3-185/+0
2006-03-20[NETFILTER]: x_tables: add xt_{match,target} arguments to match/target functionsPatrick McHardy30-22/+81
2006-03-20[NETFILTER]: x_tables: pass registered match/target data to match/target func...Patrick McHardy2-8/+10
2006-03-20[NETFILTER]: Convert arp_tables targets to centralized error checkingPatrick McHardy2-6/+8
2006-03-20[NETFILTER]: Convert ip_tables matches/targets to centralized error checkingPatrick McHardy28-390/+103
2006-03-20[NETFILTER]: Change {ip,ip6,arp}_tables to use centralized error checkingPatrick McHardy2-8/+29
2006-03-20[NETFILTER]: Fix CID offset bug in PPTP NAT helper debug messageHolger Eitzenberger1-3/+5
2006-03-20[NETFILTER] nf_conntrack: clean up to reduce size of 'struct nf_conn'Harald Welte1-10/+12
2006-03-12[NETFILTER]: arp_tables: fix NULL pointer dereferencePatrick McHardy1-1/+1
2006-03-07[NETFILTER] ip_queue: Fix wrong skb->len == nlmsg_len assumptionThomas Graf1-1/+1
2006-02-27[NETFILTER]: Restore {ipt,ip6t,ebt}_LOG compatibilityPatrick McHardy1-1/+6
2006-02-19[NETFILTER]: Fix outgoing redirects to loopbackPatrick McHardy1-11/+5
2006-02-19[NETFILTER]: Fix NAT PMTUD problemsPatrick McHardy1-9/+9
2006-02-15[NETFILTER]: nf_conntrack: move registration of __nf_ct_attachYasuyuki Kozakai1-5/+0
2006-02-15[NETFILTER]: Fix xfrm lookup after SNATPatrick McHardy1-3/+3
2006-02-04[NETFILTER]: Fix check whether dst_entry needs to be released after NATPatrick McHardy1-2/+2
2006-02-04[NETFILTER]: Prepare {ipt,ip6t}_policy match for x_tables unificationPatrick McHardy1-3/+6
2006-02-04[NETFILTER]: Check policy length in policy match strict modePatrick McHardy1-1/+1
2006-02-04[NETFILTER]: Fix possible overflow in netfilters do_replace()Kirill Korotaev2-0/+14
2006-02-04[NETFILTER]: Fix missing src port initialization in tftp expectation maskPatrick McHardy1-0/+1
2006-02-04[NETFILTER]: Fix undersized skb allocation in ipt_ULOG/ebt_ulog/nfnetlink_logPatrick McHardy1-8/+12
2006-02-04[NETFILTER]: ULOG/nfnetlink_log: Use better default value for 'nlbufsiz'Holger Eitzenberger1-1/+5
2006-02-04[NETFILTER]: ctnetlink: add MODULE_ALIAS for expectation subsystemPablo Neira Ayuso1-0/+1
2006-02-04[NETFILTER]: ctnetlink: Fix subsystem used for expectation eventsMarcus Sundberg1-1/+1
2006-01-17[NETFILTER]: ip_conntrack_proto_gre.c needs linux/interrupt.hDavid S. Miller1-0/+1
2006-01-17[NETFILTER] Makefile cleanupYasuyuki Kozakai1-1/+0
2006-01-17[NETFILTER] ip[6]t_policy: Fix compilation warningsBenoit Boissinot1-2/+5
2006-01-12[NETFILTER] x_tables: Abstraction layer for {ip,ip6,arp}_tablesHarald Welte60-3995/+245
2006-01-11[PATCH] capable/capability.h (net/)Randy Dunlap2-0/+2
2006-01-11[NETFILTER]: ip_ct_proto_gre_fini() cannot be __exitDavid S. Miller2-2/+5
2006-01-11netfilter: headers included twiceNicolas Kaiser3-3/+0
2006-01-10[NETFILTER]: Fix timeout sysctls on big-endian 64bit architecturesPatrick McHardy7-37/+37
2006-01-10[NETFILTER]: Remove unused function from NAT protocol helpersPatrick McHardy5-160/+0
2006-01-10[NETFILTER]: Fix return value confusion in PPTP NAT helperPatrick McHardy1-23/+13
2006-01-10[NETFILTER]: Fix another crash in ip_nat_pptpPatrick McHardy1-30/+27
2006-01-10[NETFILTER]: Fix crash in ip_nat_pptpPatrick McHardy1-1/+1
2006-01-10[NET]: Change memcmp(,,ETH_ALEN) to compare_ether_addr()Kris Katterjohn1-2/+3
2006-01-10spelling: s/trough/through/Adrian Bunk1-2/+2
2006-01-07[NETFILTER]: ip_conntrack_proto_sctp.c needs linux/interrupt.hJoe Kappus1-0/+1
2006-01-07[NETFILTER]: Add ipt_policy/ip6t_policy matchesPatrick McHardy3-0/+181
2006-01-07[NETFILTER]: Handle NAT in IPsec policy checksPatrick McHardy1-2/+48
2006-01-07[NETFILTER]: Redo policy lookups after NAT when neccessaryPatrick McHardy1-2/+25
2006-01-07[NETFILTER]: Use conntrack information to determine if packet was NATedPatrick McHardy1-15/+19
2006-01-06Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6Linus Torvalds1-0/+1
2006-01-06[NETFILTER]: ipt_helper.c needs linux/interrupt.hJoe1-0/+1
2006-01-06kbuild: un-stringnify KBUILD_MODNAMESam Ravnborg2-2/+2
2006-01-05[NETFILTER]: Use HOPLIMIT metric as TTL of TCP reset sent by REJECTYasuyuki Kozakai1-1/+1
2006-01-05[NETFILTER]: nf_conntrack_l3proto_ipv4.c needs net/route.hPatrick McHardy1-0/+1
2006-01-05[NETFILTER]: Call POST_ROUTING hook before fragmentationPatrick McHardy3-67/+2
2006-01-05[NETFILTER]: ctnetlink: Fix dumping of helper namePatrick McHardy1-1/+1
2006-01-05[NETFILTER]: Fix module_param types and permissionsPatrick McHardy6-25/+21
2006-01-05[NETFILTER]: Add ctnetlink port for nf_conntrackPablo Neira Ayuso2-18/+126
2006-01-05[NETFILTER]: ctnetlink: remove unused variablePablo Neira Ayuso1-2/+0
2006-01-05[NETFILTER]: ctnetlink: fix conntrack mark racePablo Neira Ayuso1-5/+5
2006-01-05[NETFILTER]: ctnetlink: ctnetlink_event cleanupPablo Neira Ayuso1-11/+4
2006-01-05[NETFILTER]: ctnetlink: use u_int32_t instead of unsigned intPablo Neira Ayuso1-1/+1
2006-01-05[NETFILTER]: ctnetlink: propagate ctnetlink_dump_tuples_proto return value backPablo Neira Ayuso1-2/+3
2006-01-05[NETFILTER]: ctnetlink: Add sanity checkings for ICMPYasuyuki Kozakai1-19/+24
2006-01-05[NETFILTER]: ctnetlink: remove bogus checks in ICMP protocol at dumpingPablo Neira Ayuso1-4/+0
2006-01-03[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.hArnaldo Carvalho de Melo7-0/+10
2006-01-03[NETFILTER] ip_tables: NUMA-aware allocationEric Dumazet2-118/+256
2005-12-19[NETFILTER]: Fix NAT init orderPatrick McHardy1-1/+2
2005-12-12[NETFILTER]: ip_nat_tftp: Fix expectation NATMarcus Sundberg1-1/+4
2005-12-05[NETFILTER]: Don't use conntrack entry after dropping the referencePatrick McHardy1-4/+2
2005-12-05[NETFILTER]: Fix unbalanced read_unlock_bh in ctnetlinkPatrick McHardy1-1/+2
2005-12-05[NETFILTER]: Mark ctnetlink as EXPERIMENTALPatrick McHardy1-4/+4
2005-12-05[NETFILTER]: Fix CTA_PROTO_NUM attribute size in ctnetlinkPatrick McHardy1-2/+2
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-28 15:54:52 +0000