aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2006-08-22[NETFILTER]: arp_tables: fix table locking in arpt_do_tablePatrick McHardy1-1/+2
2006-08-17[NETFILTER]: ip_tables: fix table locking in ipt_do_tablePatrick McHardy1-1/+2
2006-08-17[NETFILTER]: ctnetlink: fix deadlock in table dumpingPatrick McHardy1-10/+7
2006-08-13[NETFILTER]: ulog: fix panic on SMP kernelsMark Huang1-0/+5
2006-08-13[NETFILTER]: {arp,ip,ip6}_tables: proper error recovery in init pathPatrick McHardy2-15/+45
2006-08-13[NETFILTER]: xt_hashlimit: fix limit off-by-onePatrick McHardy1-7/+4
2006-08-02[NETFILTER]: xt_hashlimit/xt_string: missing string validationPatrick McHardy1-0/+3
2006-08-02[NETFILTER]: SIP helper: expect RTP streams in both directionsPatrick McHardy1-1/+1
2006-07-24[NETFILTER]: SNMP NAT: fix byteorder confusionPatrick McHardy1-2/+2
2006-07-24[NETFILTER]: conntrack: fix SYSCTL=n compileAdrian Bunk1-2/+2
2006-07-24[NETFILTER]: H.323 helper: fix possible NULL-ptr dereferencePatrick McHardy1-1/+1
2006-07-21[NET]: Conversions from kmalloc+memset to k(z|c)alloc.Panagiotis Issaris1-2/+1
2006-06-30Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6Linus Torvalds1-1/+1
2006-06-30[NETFILTER]: SCTP conntrack: fix crash triggered by packet without chunksPatrick McHardy1-1/+1
2006-06-30Remove obsolete #include <linux/config.h>Jörn Engel22-22/+0
2006-06-29[NETFILTE] ipv4: Fix typo (Bugzilla #6753)Matt LaPlante1-1/+1
2006-06-29[NETLINK]: Encapsulate eff_cap usage within security framework.Darrel Goeddel1-1/+1
2006-06-29[NETFILTER]: ip_queue/nfnetlink_queue: drop bridge port references when dev d...Patrick McHardy1-2/+10
2006-06-29[NETFILTER]: x_tables: fix xt_register_table error propagationPatrick McHardy2-2/+4
2006-06-25[PATCH] remove for_each_cpu()Andrew Morton1-1/+1
2006-06-17[NETFILTER]: hashlimit match: fix random initializationPatrick McHardy1-2/+5
2006-06-17[NETFILTER]: recent match: missing refcnt initializationPatrick McHardy1-0/+1
2006-06-17[NETFILTER]: recent match: fix "sleeping function called from invalid context"Patrick McHardy1-5/+10
2006-06-17[SECMARK]: Add secmark support to conntrackJames Morris3-0/+20
2006-06-17[SECMARK]: Add secmark support to core networking.James Morris1-0/+1
2006-06-17[NETFILTER]: PPTP helper: fixup gre_keymap_lookup() return typeAlexey Dobriyan1-3/+3
2006-06-17[NETFILTER]: Add SIP connection tracking helperPatrick McHardy4-0/+740
2006-06-17[NETFILTER]: H.323 helper: replace internal_net_addr parameter by routing-bas...Patrick McHardy1-30/+27
2006-06-17[NETFILTER]: H.323 helper: Add support for Call ForwardingJing Min Zhao4-7/+196
2006-06-17[NETFILTER]: amanda helper: convert to textsearch infrastructurePatrick McHardy2-49/+96
2006-06-17[NETFILTER]: FTP helper: search optimizationPatrick McHardy1-34/+43
2006-06-17[NETFILTER]: SNMP helper: fix debug module param typePatrick McHardy1-1/+1
2006-06-17[NETFILTER]: ctnetlink: change table dumping not to require an unique IDPatrick McHardy1-8/+24
2006-06-17[NETFILTER]: ctnetlink: fix NAT configurationPatrick McHardy1-31/+22
2006-06-17[NETFILTER]: conntrack: add fixed timeout flag in connection trackingEric Leblond1-0/+6
2006-06-17[NETFILTER]: conntrack: add sysctl to disable checksummingPatrick McHardy5-4/+15
2006-06-17[NETFILTER]: conntrack: don't call helpers for related ICMP messagesPatrick McHardy2-2/+2
2006-06-17[NETFILTER]: recent match: replace by rewritten versionPatrick McHardy1-891/+377
2006-06-17[NETFILTER]: x_tables: add SCTP/DCCP support where missingPatrick McHardy2-62/+22
2006-06-17[NETFILTER]: x_tables: remove some unnecessary castsPatrick McHardy1-1/+1
2006-05-28[NETFILTER]: PPTP helper: fix sstate/cstate typoAlexey Dobriyan1-2/+2
2006-05-28[NETFILTER]: mark H.323 helper experimentalPatrick McHardy1-2/+2
2006-05-28[NETFILTER]: Fix small information leak in SO_ORIGINAL_DST (CVE-2006-1343)Marcel Holtmann2-0/+2
2006-05-23[NETFILTER]: SNMP NAT: fix memleak in snmp_object_decodeChris Wright1-0/+1
2006-05-23[NETFILTER]: H.323 helper: fix sequence extension parsingPatrick McHardy1-1/+1
2006-05-23[NETFILTER]: H.323 helper: fix parser error propagationPatrick McHardy1-15/+19
2006-05-22[NETFILTER]: SNMP NAT: fix memory corruptionPatrick McHardy1-8/+7
2006-05-19[NETFILTER]: Fix do_add_counters race, possible oops or info leak (CVE-2006-0...Solar Designer1-1/+1
2006-05-19[NETFILTER]: GRE conntrack: fix htons/htonl confusionAlexey Dobriyan1-6/+6
2006-05-19[NETFILTER]: fix format specifier for netfilter log targetsPhilip Craig1-1/+1
2006-05-19[NETFILTER]: Fix memory leak in ipt_recentJesper Juhl1-1/+1
2006-05-03[NETFILTER]: x_tables: don't use __copy_{from,to}_user on unchecked memory in...Patrick McHardy1-3/+3
2006-05-03[NETFILTER]: H.323 helper: Change author's email addressJing Min Zhao1-1/+1
2006-05-03[NETFILTER]: NAT: silence unused variable warnings with CONFIG_XFRM=nPatrick McHardy1-0/+2
2006-05-03[NETFILTER]: H.323 helper: fix use of uninitialized dataPatrick McHardy1-4/+4
2006-05-03[NETFILTER]: H.323 helper: fix endless loop caused by invalid TPKT lenPatrick McHardy1-0/+2
2006-05-02[NETFILTER] SCTP conntrack: fix infinite loopPatrick McHardy1-4/+7
2006-05-01[NETFILTER] x_tables: fix compat related crash on non-x86Patrick McHardy1-19/+14
2006-04-24[NETFILTER]: ULOG target is not obsoleteThomas Voegtle1-1/+1
2006-04-11[PATCH] for_each_possible_cpu: network codesKAMEZAWA Hiroyuki3-5/+5
2006-04-09[NETFILTER]: Fix DNAT in LOCAL_OUTPatrick McHardy1-1/+1
2006-04-09[NETFILTER]: H.323 helper: remove changelogPatrick McHardy2-49/+0
2006-04-09[NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functionsPatrick McHardy5-53/+13
2006-04-09[NETFILTER]: Fix IP_NF_CONNTRACK_NETLINK dependencyPatrick McHardy1-0/+1
2006-04-09[NETFILTER]: H.323 helper: add parameter 'default_rrq_ttl'Jing Min Zhao1-1/+5
2006-04-09[NETFILTER]: H.323 helper: make get_h245_addr() staticJing Min Zhao1-2/+2
2006-04-09[NETFILTER]: H.323 helper: change EXPORT_SYMBOL to EXPORT_SYMBOL_GPLJing Min Zhao1-12/+11
2006-04-09[NETFILTER]: H.323 helper: move some function prototypes to ip_conntrack_h323.hJing Min Zhao5-1092/+1
2006-04-09[NETFILTER]: Fix section mismatch warningsPatrick McHardy5-118/+97
2006-04-09[NETFILTER]: Clean up hook registrationPatrick McHardy7-421/+199
2006-04-01[NETFILTER]: iptables 32bit compat layerDmitry Mishin1-131/+1007
2006-04-01[NETFILTER]: {ip,nf}_conntrack_netlink: fix expectation notifier unregistrationMartin Josefsson1-1/+1
2006-04-01[NETFILTER]: x_tables: unify IPv4/IPv6 multiport matchYasuyuki Kozakai3-206/+0
2006-04-01[NETFILTER]: x_tables: unify IPv4/IPv6 esp matchYasuyuki Kozakai3-116/+5
2006-03-28[NETFILTER]: Rename init functions.Andrew Morton49-200/+200
2006-03-27[PATCH] Notifier chain update: API changesAlan Stern1-3/+3
2006-03-26[PATCH] sem2mutex: misc static one-file mutexesIngo Molnar1-4/+5
2006-03-24[PATCH] s/;;/;/gAlexey Dobriyan1-1/+1
2006-03-22[NETFILTER]: Fix undefined references to get_h225_addrPatrick McHardy1-2/+2
2006-03-22[NETFILTER]: nf_conntrack: support for layer 3 protocol load on demandPablo Neira Ayuso1-0/+1
2006-03-22[NETFILTER]: x_tables: set the protocol family in x_tables targets/matchesPablo Neira Ayuso2-8/+13
2006-03-22[NETFILTER]: conntrack: cleanup the conntrack ID initializationPablo Neira Ayuso1-2/+2
2006-03-22[NETFILTER]: ctnetlink: Fix expectaction mask dumpingPablo Neira Ayuso1-17/+55
2006-03-20[NETFILTER]: Add H.323 conntrack/NAT helperJing Min Zhao8-0/+6199
2006-03-20[NETFILTER]: Fix warnings in ip_nat_snmp_basic.cDavid S. Miller1-1/+4
2006-03-20[NET]: sem2mutex part 2Ingo Molnar2-2/+2
2006-03-20[NET] sem2mutex: net/Arjan van de Ven1-5/+6
2006-03-20[NETFILTER]: Fix skb->nf_bridge lifetime issuesPatrick McHardy1-4/+0
2006-03-20[NETFILTER]: ctnetlink: avoid unneccessary event message generationPatrick McHardy1-3/+4
2006-03-20[NETFILTER]: x_tables: replace IPv4/IPv6 policy match by address family indep...Patrick McHardy3-185/+0
2006-03-20[NETFILTER]: x_tables: add xt_{match,target} arguments to match/target functionsPatrick McHardy30-22/+81
2006-03-20[NETFILTER]: x_tables: pass registered match/target data to match/target func...Patrick McHardy2-8/+10
2006-03-20[NETFILTER]: Convert arp_tables targets to centralized error checkingPatrick McHardy2-6/+8
2006-03-20[NETFILTER]: Convert ip_tables matches/targets to centralized error checkingPatrick McHardy28-390/+103
2006-03-20[NETFILTER]: Change {ip,ip6,arp}_tables to use centralized error checkingPatrick McHardy2-8/+29
2006-03-20[NETFILTER]: Fix CID offset bug in PPTP NAT helper debug messageHolger Eitzenberger1-3/+5
2006-03-20[NETFILTER] nf_conntrack: clean up to reduce size of 'struct nf_conn'Harald Welte1-10/+12
2006-03-12[NETFILTER]: arp_tables: fix NULL pointer dereferencePatrick McHardy1-1/+1
2006-03-07[NETFILTER] ip_queue: Fix wrong skb->len == nlmsg_len assumptionThomas Graf1-1/+1
2006-02-27[NETFILTER]: Restore {ipt,ip6t,ebt}_LOG compatibilityPatrick McHardy1-1/+6
2006-02-19[NETFILTER]: Fix outgoing redirects to loopbackPatrick McHardy1-11/+5
2006-02-19[NETFILTER]: Fix NAT PMTUD problemsPatrick McHardy1-9/+9
2006-02-15[NETFILTER]: nf_conntrack: move registration of __nf_ct_attachYasuyuki Kozakai1-5/+0
2006-02-15[NETFILTER]: Fix xfrm lookup after SNATPatrick McHardy1-3/+3
2006-02-04[NETFILTER]: Fix check whether dst_entry needs to be released after NATPatrick McHardy1-2/+2
2006-02-04[NETFILTER]: Prepare {ipt,ip6t}_policy match for x_tables unificationPatrick McHardy1-3/+6
2006-02-04[NETFILTER]: Check policy length in policy match strict modePatrick McHardy1-1/+1
2006-02-04[NETFILTER]: Fix possible overflow in netfilters do_replace()Kirill Korotaev2-0/+14
2006-02-04[NETFILTER]: Fix missing src port initialization in tftp expectation maskPatrick McHardy1-0/+1
2006-02-04[NETFILTER]: Fix undersized skb allocation in ipt_ULOG/ebt_ulog/nfnetlink_logPatrick McHardy1-8/+12
2006-02-04[NETFILTER]: ULOG/nfnetlink_log: Use better default value for 'nlbufsiz'Holger Eitzenberger1-1/+5
2006-02-04[NETFILTER]: ctnetlink: add MODULE_ALIAS for expectation subsystemPablo Neira Ayuso1-0/+1
2006-02-04[NETFILTER]: ctnetlink: Fix subsystem used for expectation eventsMarcus Sundberg1-1/+1
2006-01-17[NETFILTER]: ip_conntrack_proto_gre.c needs linux/interrupt.hDavid S. Miller1-0/+1
2006-01-17[NETFILTER] Makefile cleanupYasuyuki Kozakai1-1/+0
2006-01-17[NETFILTER] ip[6]t_policy: Fix compilation warningsBenoit Boissinot1-2/+5
2006-01-12[NETFILTER] x_tables: Abstraction layer for {ip,ip6,arp}_tablesHarald Welte60-3995/+245
2006-01-11[PATCH] capable/capability.h (net/)Randy Dunlap2-0/+2
2006-01-11[NETFILTER]: ip_ct_proto_gre_fini() cannot be __exitDavid S. Miller2-2/+5
2006-01-11netfilter: headers included twiceNicolas Kaiser3-3/+0
2006-01-10[NETFILTER]: Fix timeout sysctls on big-endian 64bit architecturesPatrick McHardy7-37/+37
2006-01-10[NETFILTER]: Remove unused function from NAT protocol helpersPatrick McHardy5-160/+0
2006-01-10[NETFILTER]: Fix return value confusion in PPTP NAT helperPatrick McHardy1-23/+13
2006-01-10[NETFILTER]: Fix another crash in ip_nat_pptpPatrick McHardy1-30/+27
2006-01-10[NETFILTER]: Fix crash in ip_nat_pptpPatrick McHardy1-1/+1
2006-01-10[NET]: Change memcmp(,,ETH_ALEN) to compare_ether_addr()Kris Katterjohn1-2/+3
2006-01-10spelling: s/trough/through/Adrian Bunk1-2/+2
2006-01-07[NETFILTER]: ip_conntrack_proto_sctp.c needs linux/interrupt.hJoe Kappus1-0/+1
2006-01-07[NETFILTER]: Add ipt_policy/ip6t_policy matchesPatrick McHardy3-0/+181
2006-01-07[NETFILTER]: Handle NAT in IPsec policy checksPatrick McHardy1-2/+48
2006-01-07[NETFILTER]: Redo policy lookups after NAT when neccessaryPatrick McHardy1-2/+25
2006-01-07[NETFILTER]: Use conntrack information to determine if packet was NATedPatrick McHardy1-15/+19
2006-01-06Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6Linus Torvalds1-0/+1
2006-01-06[NETFILTER]: ipt_helper.c needs linux/interrupt.hJoe1-0/+1
2006-01-06kbuild: un-stringnify KBUILD_MODNAMESam Ravnborg2-2/+2
2006-01-05[NETFILTER]: Use HOPLIMIT metric as TTL of TCP reset sent by REJECTYasuyuki Kozakai1-1/+1
2006-01-05[NETFILTER]: nf_conntrack_l3proto_ipv4.c needs net/route.hPatrick McHardy1-0/+1
2006-01-05[NETFILTER]: Call POST_ROUTING hook before fragmentationPatrick McHardy3-67/+2
2006-01-05[NETFILTER]: ctnetlink: Fix dumping of helper namePatrick McHardy1-1/+1
2006-01-05[NETFILTER]: Fix module_param types and permissionsPatrick McHardy6-25/+21
2006-01-05[NETFILTER]: Add ctnetlink port for nf_conntrackPablo Neira Ayuso2-18/+126
2006-01-05[NETFILTER]: ctnetlink: remove unused variablePablo Neira Ayuso1-2/+0
2006-01-05[NETFILTER]: ctnetlink: fix conntrack mark racePablo Neira Ayuso1-5/+5
2006-01-05[NETFILTER]: ctnetlink: ctnetlink_event cleanupPablo Neira Ayuso1-11/+4
2006-01-05[NETFILTER]: ctnetlink: use u_int32_t instead of unsigned intPablo Neira Ayuso1-1/+1
2006-01-05[NETFILTER]: ctnetlink: propagate ctnetlink_dump_tuples_proto return value backPablo Neira Ayuso1-2/+3
2006-01-05[NETFILTER]: ctnetlink: Add sanity checkings for ICMPYasuyuki Kozakai1-19/+24
2006-01-05[NETFILTER]: ctnetlink: remove bogus checks in ICMP protocol at dumpingPablo Neira Ayuso1-4/+0
2006-01-03[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.hArnaldo Carvalho de Melo7-0/+10
2006-01-03[NETFILTER] ip_tables: NUMA-aware allocationEric Dumazet2-118/+256
2005-12-19[NETFILTER]: Fix NAT init orderPatrick McHardy1-1/+2
2005-12-12[NETFILTER]: ip_nat_tftp: Fix expectation NATMarcus Sundberg1-1/+4
2005-12-05[NETFILTER]: Don't use conntrack entry after dropping the referencePatrick McHardy1-4/+2
2005-12-05[NETFILTER]: Fix unbalanced read_unlock_bh in ctnetlinkPatrick McHardy1-1/+2
2005-12-05[NETFILTER]: Mark ctnetlink as EXPERIMENTALPatrick McHardy1-4/+4
2005-12-05[NETFILTER]: Fix CTA_PROTO_NUM attribute size in ctnetlinkPatrick McHardy1-2/+2
2005-12-05[NETFILTER]: Fix ip_conntrack_flush abuse in ctnetlinkPatrick McHardy1-9/+11
2005-12-05[NETFILTER]: Fix incorrect argument to ip_nat_initialized() in ctnetlinkPablo Neira Ayuso1-1/+1
2005-12-01[NETFILTER]: Fix recent match jiffies wrap mismatchesPhil Oester1-0/+1
2005-12-01[NETFILTER]: Ignore ACKs ACKs on half open connections in TCP conntrackJozsef Kadlecsik1-9/+20
2005-11-29[NETFILTER] ipv4: small cleanupsAdrian Bunk3-4/+4
2005-11-29[NET]: Add const markers to various variables.Arjan van de Ven8-12/+12
2005-11-23[NETFILTER]: ip_conntrack_netlink.c needs linux/interrupt.hBenoit Boissinot1-0/+1
2005-11-22[NETFILTER] ctnetlink: Fix refcount leak ip_conntrack/nat_protoPablo Neira Ayuso1-12/+12
2005-11-20[NETFILTER]: fixed dependencies between modules related with ip_conntrackYasuyuki Kozakai1-5/+5
2005-11-17[NETFILTER] ip_conntrack: fix ftp/irc/tftp helpers on ports >= 32768Harald Welte3-6/+6
2005-11-14[NETFILTER] nfnetlink: unconditionally require CAP_NET_ADMINHarald Welte1-14/+7
2005-11-14[NETFILTER] ctnetlink: More thorough size checking of attributesPablo Neira Ayuso2-0/+46
2005-11-14[NETFILTER] ctnetlink: use size_t to make gcc-4.x happyPablo Neira Ayuso1-3/+3
2005-11-12[NETFILTER] {ip,nf}_conntrack TCP: Accept SYN+PUSH like SYNVlad Drukker1-0/+1
2005-11-10[NET]: Detect hardware rx checksum faults correctlyHerbert Xu1-7/+4
2005-11-09[NETFILTER]: Add nf_conntrack subsystem.Yasuyuki Kozakai13-58/+1106
2005-11-09[NETFILTER] ctnetlink: ICMP_ID is u_int16_t not u_int8_t.Krzysztof Piotr Oledzki1-1/+1
2005-11-09[NETFILTER] ctnetlink: Fix oops when no ICMP ID info in messageKrzysztof Piotr Oledzki1-1/+2
2005-11-09[NETFILTER] ctnetlink: Add support to identify expectations by ID'sPablo Neira Ayuso1-0/+8
2005-11-09[NETFILTER] ctnetlink: propagate error instaed of returning -EPERMPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER] ctnetlink: return -EINVAL if size is wrongPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER]: stop tracking ICMP error at early pointYasuyuki Kozakai1-5/+5
2005-11-09[NETFILTER] PPTP helper: fix PNS-PAC expectation call idPhilip Craig1-2/+26
2005-11-09[NETFILTER] ctnetlink: get_conntrack can use GFP_KERNELPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER] ctnetlink: kill unused includesPablo Neira Ayuso1-3/+0
2005-11-09[NETFILTER] ctnetlink: add module alias to fix autoloadingPablo Neira Ayuso1-0/+2
2005-11-09[NETFILTER] ctnetlink: add marking support from userspacePablo Neira Ayuso1-0/+10
2005-11-09[NETFILTER] ctnetlink: check if protoinfo is presentPablo Neira Ayuso1-0/+5
2005-11-09[NETFILTER] nfnetlink: nfattr_parse() can never fail, make it voidHarald Welte2-42/+9
2005-11-09[NETFILTER]: refcount leak of proto when ctnetlink dumping tupleYasuyuki Kozakai1-3/+6
2005-11-09[NETFILTER]: packet counter of conntrack is 32bitsYasuyuki Kozakai1-1/+1
2005-11-08[NET]: kfree cleanupJesper Juhl1-2/+1
2005-11-05[NETFILTER]: CONNMARK target needs ip_conntrackHarald Welte1-0/+1
2005-11-05[NETFILTER]: Fix double free after netlink_unicast() in ctnetlinkHarald Welte1-12/+7
2005-11-05[NETFILTER] NAT: Fix module refcount dropping too farHarald Welte2-5/+3
2005-11-04[NETFILTER] PPTP helper: Fix endianness bug in GRE key / CallID NATHarald Welte1-2/+2
2005-11-04[NETFILTER] PPTP helper: Fix compilation of conntrack helper without NATHarald Welte2-4/+2
2005-10-31[NETFILTER]: Add "revision" support to arp_tables and ip6_tablesHarald Welte1-70/+131
2005-10-30[PATCH] Typo fix: dot after newline in printk stringsJean Delvare1-1/+1
2005-10-26[NETFILTER] ip_conntrack: Make "hashsize" conntrack parameter writableHarald Welte1-37/+95
2005-10-13[NETFILTER]: Fix OOPSes on machines with discontiguous cpu numbering.David S. Miller2-11/+20
2005-10-10[NETFILTER] ctnetlink: add support to change protocol infoPablo Neira Ayuso1-0/+37
2005-10-10[NETFILTER] ctnetlink: allow userspace to change TCP statePablo Neira Ayuso1-0/+23
2005-10-10[NETFILTER]: Use only 32bit counters for CONNTRACK_ACCTHarald Welte2-9/+12
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-20 17:27:20 +0000