aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2011-11-06Merge branch 'modsplit-Oct31_2011' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds8-0/+9
2011-11-01netfilter: do not propagate nf_queue errors in nf_hook_slowFlorian Westphal1-6/+5
2011-11-01ipvs: Remove unused variable "cs" from ip_vs_leave function.Krzysztof Wilczynski1-1/+1
2011-11-01netfilter: Remove unnecessary OOM logging messagesJoe Perches13-60/+28
2011-11-01ipvs: Removed unused variablesSimon Horman1-4/+0
2011-11-01ipvs: Remove unused return value of protocol state transitionsSimon Horman4-24/+14
2011-11-01ipvs: Remove unused parameter from ip_vs_confirm_conntrack()Simon Horman2-2/+2
2011-11-01ipvs: Expose ip_vs_ftp module parameters via sysfs.Krzysztof Wilczynski1-2/+3
2011-10-31net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modulesPaul Gortmaker5-0/+5
2011-10-31net: add moduleparam.h for users of module_param/MODULE_PARM_DESCPaul Gortmaker1-0/+1
2011-10-31net: Fix files explicitly needing to include module.hPaul Gortmaker3-0/+3
2011-10-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds9-31/+31
2011-10-25Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jik...Linus Torvalds2-4/+3
2011-10-24Merge branch 'master' of ra.kernel.org:/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-53/+88
2011-10-17Merge branch 'nf' of git://1984.lsi.us.es/netDavid S. Miller3-53/+88
2011-10-12IPVS netns shutdown/startup dead-lockHans Schillstrom2-51/+86
2011-10-07Merge branch 'master' of github.com:davem330/netDavid S. Miller1-1/+1
2011-10-05netfilter: Use proper rwlock init functionThomas Gleixner1-1/+1
2011-10-03netfilter: nf_conntrack: fix event flooding in GRE protocol trackerFlorian Westphal1-2/+2
2011-09-27doc: fix broken referencesPaul Bolle1-1/+1
2011-09-22Merge branch 'master' of github.com:davem330/netDavid S. Miller4-10/+10
2011-09-15Merge branch 'master' into for-nextJiri Kosina4-2/+4
2011-09-15net: Convert vmalloc/memset to vzallocJoe Perches1-3/+2
2011-08-30Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller4-10/+10
2011-08-30netfilter: nf_ct_tcp: wrong multiplication of TCPOLEN_TSTAMP_ALIGNED in tcp_s...Jozsef Kadlecsik1-1/+1
2011-08-30netfilter: nf_ct_tcp: fix incorrect handling of invalid TCP optionJozsef Kadlecsik1-2/+2
2011-08-30netfilter: nf_ct_pptp: fix DNATed PPTP connection address translationSanket Shah1-0/+1
2011-08-30netfilter: nf_queue: reject NF_STOLEN verdicts from userspaceFlorian Westphal1-2/+2
2011-08-07Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2011-08-07netfilter: avoid double free in nf_reinjectJulian Anastasov1-0/+1
2011-08-02rcu: convert uses of rcu_assign_pointer(x, NULL) to RCU_INIT_POINTERStephen Hemminger9-31/+31
2011-07-29netfilter: xt_rateest: fix xt_rateest_mt_checkentry()Eric Dumazet1-5/+4
2011-07-28Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/horms/...David S. Miller1-0/+1
2011-07-26atomic: use <linux/atomic.h>Arun Sharma2-2/+2
2011-07-22Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-7/+1
2011-07-22IPVS: Free resources on module removalSimon Horman1-0/+1
2011-07-21Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller10-76/+215
2011-07-21netfilter: ipset: hash:net,iface fixed to handle overlapping nets behind diff...Jozsef Kadlecsik7-20/+56
2011-07-20net,rcu: Convert call_rcu(xt_rateest_free_rcu) to kfree_rcu()Paul E. McKenney1-7/+1
2011-07-19netfilter: nfnetlink_queue: batch verdict supportFlorian Westphal1-12/+103
2011-07-19netfilter: nfnetlink_queue: assert monotonic packet idsEric Dumazet1-11/+15
2011-07-18netfilter: nfnetlink_queue: provide rcu enabled callbacksEric Dumazet1-29/+12
2011-07-18netfilter: nfnetlink: add RCU in nfnetlink_rcv_msg()Eric Dumazet1-10/+30
2011-07-01netfilter: Reduce switch/case indentJoe Perches2-48/+48
2011-06-30netfilter: add SELinux context support to AUDIT targetMr Dash Four1-0/+5
2011-06-21ip: introduce ip_is_fragment helper inline functionPaul Gortmaker1-4/+3
2011-06-21Remove redundant linux/version.h includes from net/Jesper Juhl2-2/+0
2011-06-20Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller12-28/+38
2011-06-16netfilter: ipset: whitespace and coding fixes detected by checkpatch.plJozsef Kadlecsik7-21/+22
2011-06-16netfilter: ipset: hash:net,iface type introducedJozsef Kadlecsik3-0/+773
2011-06-16netfilter: ipset: use the stored first cidr value instead of '1'Jozsef Kadlecsik3-8/+16
2011-06-16netfilter: ipset: fix return code for destroy when sets are in useJozsef Kadlecsik1-1/+1
2011-06-16netfilter: ipset: add xt_action_param to the variant level kadt functions, ip...Jozsef Kadlecsik12-16/+37
2011-06-16netfilter: ipset: use unified from/to address masking and check the usageJozsef Kadlecsik7-17/+9
2011-06-16netfilter: ipset: take into account cidr value for the from address when crea...Jozsef Kadlecsik1-0/+1
2011-06-16netfilter: ipset: support range for IPv4 at adding/deleting elements for hash...Jozsef Kadlecsik4-54/+156
2011-06-16netfilter: ipset: set type support with multiple revisions addedJozsef Kadlecsik11-30/+45
2011-06-16netfilter: ipset: fix adding ranges to hash typesJozsef Kadlecsik11-30/+137
2011-06-16netfilter: ipset: support listing setnames and headers tooJozsef Kadlecsik1-27/+46
2011-06-16netfilter: ipset: options and flags support added to the kernel APIJozsef Kadlecsik12-126/+176
2011-06-16netfilter: ipset: whitespace fixes: some space before tab slipped inJozsef Kadlecsik1-2/+2
2011-06-16netfilter: ipset: timeout can be modified for already added elementsJozsef Kadlecsik10-93/+126
2011-06-16netfilter: fix looped (broad|multi)cast's MAC handlingNicolas Cavallari2-2/+4
2011-06-16Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/horms/...Patrick McHardy8-112/+87
2011-06-16Merge branch 'master' of /repos/git/net-next-2.6Patrick McHardy20-211/+389
2011-06-14IPVS: remove unused init and cleanup functions.Hans Schillstrom4-53/+4
2011-06-14IPVS: labels at pos 0Hans Schillstrom2-9/+9
2011-06-13IPVS netns exit causes crash in conntrackHans Schillstrom2-1/+10
2011-06-13IPVS: rename of netns init and cleanup functions.Hans Schillstrom7-38/+38
2011-06-13ipvs: support more FTP PASV responsesJulian Anastasov1-14/+38
2011-06-09rtnetlink: Compute and store minimum ifinfo dump sizeGreg Rose2-3/+3
2011-06-06netfilter: nf_conntrack: fix ct refcount leak in l4proto->error()Pablo Neira Ayuso1-0/+3
2011-06-06netfilter: ipset: Use the stored first cidr value instead of '1'Jozsef Kadlecsik3-8/+16
2011-06-06netfilter: ipset: Fix return code for destroy when sets are in useJozsef Kadlecsik1-1/+1
2011-06-06ipvs: restore support for iptables SNATJulian Anastasov1-8/+8
2011-06-06netfilter: add more values to enum ip_conntrack_infoEric Dumazet8-17/+13
2011-05-27IPVS: bug in ip_vs_ftp, same list heaad used in all netns.Hans Schillstrom1-8/+19
2011-05-26netfilter: ipset: fix ip_set_flush return codeJozsef Kadlecsik1-1/+1
2011-05-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jik...Linus Torvalds1-1/+1
2011-05-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds12-76/+101
2011-05-19Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2-16/+3
2011-05-17Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller4-10/+18
2011-05-17Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller1-4/+12
2011-05-16netfilter: nf_ct_sip: fix SDP parsing in TCP SIP messages for some Cisco phonesPatrick McHardy1-4/+10
2011-05-16netfilter: nf_ct_sip: validate Content-Length in TCP SIP messagesPatrick McHardy1-0/+2
2011-05-15IPVS: fix netns if reading ip_vs_* procfs entriesHans Schillstrom3-6/+6
2011-05-12ipvs: Remove all remaining references to rt->rt_{src,dst}Julian Anastasov2-46/+50
2011-05-12ipvs: Eliminate rt->rt_dst usage in __ip_vs_get_out_rt().David S. Miller1-3/+4
2011-05-12ipvs: Use IP_VS_RT_MODE_* instead of magic constants.David S. Miller1-9/+15
2011-05-11Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller11-107/+248
2011-05-10netfilter: revert a2361c8735e07322023aedc36e4938b35af31eb0Pablo Neira Ayuso1-5/+0
2011-05-10netfilter: IPv6: fix DSCP mangle codeFernando Luis Vazquez Cao1-1/+1
2011-05-10IPVS: init and cleanup restructuringHans Schillstrom7-80/+206
2011-05-10IPVS: Change of socket usage to enable name space exit.Hans Schillstrom2-22/+38
2011-05-10netfilter: fix ebtables compat supportEric Dumazet1-2/+2
2011-05-10netfilter: ctnetlink: fix timestamp support for new conntracksPablo Neira Ayuso1-0/+4
2011-05-09IPVS: init and cleanup restructuringHans Schillstrom7-80/+206
2011-05-09IPVS: Change of socket usage to enable name space exit.Hans Schillstrom2-22/+38
2011-05-07net,rcu: convert call_rcu(xt_osf_finger_free_rcu) to kfree_rcu()Lai Jiangshan1-9/+2
2011-05-07net,rcu: convert call_rcu(__nf_ct_ext_free_rcu) to kfree_rcu()Lai Jiangshan1-7/+1
2011-04-26Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller3-10/+30
2011-04-26Merge branch 'master' into for-nextJiri Kosina27-246/+245
2011-04-21netfilter: xt_CT: provide info on why a rule was rejectedJan Engelhardt1-3/+8
2011-04-21netfilter: fix ebtables compat supportEric Dumazet1-2/+2
2011-04-21netfilter: ctnetlink: fix timestamp support for new conntracksPablo Neira Ayuso1-0/+4
2011-04-19Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller3-10/+30
2011-04-19Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller7-14/+22
2011-04-19netfilter: ipset: Fix the order of listing of setsJozsef Kadlecsik1-8/+10
2011-04-17netfilter: nf_conntrack_standalone: Fix set-but-unused variables.David S. Miller1-1/+1
2011-04-17netfilter: nfnetlink_log: Fix set-but-unused variables.David S. Miller1-2/+0
2011-04-13netfilter: ipset: SCTP, UDPLITE support addedJozsef Kadlecsik5-5/+19
2011-04-13netfilter: ipset: set match and SET target fixesJozsef Kadlecsik1-2/+16
2011-04-13netfilter: ipset: bitmap:ip,mac type requires "src" for MACJozsef Kadlecsik1-0/+4
2011-04-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6Linus Torvalds12-106/+132
2011-04-10treewide: remove extra semicolonsJustin P. Mattock1-1/+1
2011-04-05IPVS: combine consecutive #ifdef CONFIG_PROC_FS blocksSimon Horman1-3/+0
2011-04-04netfilter: xt_conntrack: fix inverted conntrack direction testFlorian Westphal1-1/+1
2011-04-04netfilter: get rid of atomic ops in fast pathEric Dumazet1-6/+3
2011-04-04netfilter: xt_addrtype: replace rt6_lookup with nf_afinfo->routeFlorian Westphal2-15/+28
2011-04-04netfilter: af_info: add 'strict' parameter to limit lookup to .oifFlorian Westphal2-5/+5
2011-04-04netfilter: af_info: add network namespace parameter to route hookFlorian Westphal2-5/+5
2011-04-04IPVS: fix NULL ptr dereference in ip_vs_ctl.c ip_vs_genl_dump_daemons()Hans Schillstrom1-1/+1
2011-04-04netfilter: h323: bug in parsing of ASN1 SEQOF fieldDavid Sterba1-1/+1
2011-04-04netfilter: ipset: references are protected by rwlock instead of mutexJozsef Kadlecsik5-53/+71
2011-04-04netfilter: ipset: list:set timeout variant fixesJozsef Kadlecsik1-29/+24
2011-03-31Fix common misspellingsLucas De Marchi10-17/+17
2011-03-21IPVS: Use global mutex in ip_vs_app.cSimon Horman1-13/+10
2011-03-21ipvs: fix a typo in __ip_vs_control_init()Eric Dumazet1-1/+1
2011-03-20netfilter: ipset: fix checking the type revision at create commandJozsef Kadlecsik1-5/+17
2011-03-20netfilter: ipset: fix address ranges at hash:*port* typesJozsef Kadlecsik4-94/+38
2011-03-16Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller1-9/+27
2011-03-16netfilter ebtables: fix xt_AUDIT to work with ebtablesThomas Graf1-9/+27
2011-03-15Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller15-249/+602
2011-03-15netfilter: xt_addrtype: ipv6 supportFlorian Westphal2-2/+97
2011-03-15netfilter: ipt_addrtype: rename to xt_addrtypeFlorian Westphal3-0/+146
2011-03-15netfilter: xt_connlimit: remove connlimit_rnd_initedChangli Gao1-4/+7
2011-03-15netfilter: xt_connlimit: use hlist insteadChangli Gao1-14/+14
2011-03-15netfilter: xt_connlimit: use kmalloc() instead of kzalloc()Changli Gao1-1/+1
2011-03-15netfilter: xt_connlimit: fix daddr connlimit in SNAT scenarioChangli Gao1-11/+9
2011-03-15IPVS: Add __ip_vs_control_{init,cleanup}_sysctl()Simon Horman1-36/+62
2011-03-15IPVS: Conditionally define and use ip_vs_lblc{r}_tableSimon Horman2-9/+20
2011-03-15IPVS: Minimise ip_vs_leave when CONFIG_SYSCTL is undefinedSimon Horman1-2/+7
2011-03-15IPVS: Conditinally use sysctl_lblc{r}_expirationSimon Horman2-9/+28
2011-03-15IPVS: Add expire_quiescent_template()Simon Horman1-2/+11
2011-03-15IPVS: Add sysctl_expire_nodest_conn()Simon Horman1-1/+7
2011-03-15IPVS: Add sysctl_sync_ver()Simon Horman1-2/+2
2011-03-15IPVS: Add {sysctl_sync_threshold,period}()Simon Horman3-9/+9
2011-03-15IPVS: Add sysctl_nat_icmp_send()Simon Horman1-3/+8
2011-03-15IPVS: Add sysctl_snat_reroute()Simon Horman1-4/+16
2011-03-15IPVS: Add ip_vs_route_me_harder()Simon Horman1-26/+22
2011-03-15ipvs: rename estimator functionsJulian Anastasov2-8/+8
2011-03-15ipvs: optimize rates readingJulian Anastasov2-39/+25
2011-03-15ipvs: properly zero stats and ratesJulian Anastasov2-43/+68
2011-03-15ipvs: reorganize tot_statsJulian Anastasov3-26/+28
2011-03-15netfilter:ipvs: use kmemdupShan Wei2-7/+5
2011-03-15ipvs: remove _bh from percpu stats readingJulian Anastasov1-4/+4
2011-03-15ipvs: avoid lookup for fwmark 0Julian Anastasov1-3/+5
2011-03-14netfilter: nf_conntrack: fix sysctl memory leakStephen Hemminger1-0/+1
2011-03-14netfilter: x_tables: return -ENOENT for non-existant matches/targetsPatrick McHardy1-2/+2
2011-03-12ipv6: Convert to use flowi6 where applicable.David S. Miller3-19/+17
2011-03-12netfilter: Use flowi4 and flowi6 in xt_TCPMSSDavid S. Miller1-5/+10
2011-03-12netfilter: Use flowi4 and flowi6 in nf_conntrack_h323_mainDavid S. Miller1-12/+20
2011-03-12ipv4: Use flowi4 in public route lookup interfaces.David S. Miller2-13/+13
2011-03-12net: Put flowi_* prefix on AF independent members of struct flowiDavid S. Miller3-4/+4
2011-03-12ipv4: Create and use route lookup helpers.David S. Miller1-12/+2
2011-03-09netfilter: x_tables: misuse of try_then_request_moduleStephen Hemminger1-7/+15
2011-03-08netfilter: ipset: fix the compile warning in ip_set_createShan Wei1-1/+1
2011-03-03Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller2-2/+6
2011-03-02ipv4: Make output route lookup return rtable directly.David S. Miller2-4/+8
2011-03-02xfrm: Return dst directly from xfrm_lookup()David S. Miller1-2/+7
2011-03-02Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller18-145/+124
2011-03-02netfilter: nf_log: avoid oops in (un)bind with invalid nfproto valuesJan Engelhardt1-0/+4
2011-03-02ipvs: fix dst_lock locking on dest updateJulian Anastasov1-2/+2
2011-02-28netfilter: nf_ct_tcp: fix out of sync scenario while in SYN_RECVPablo Neira Ayuso1-2/+2
2011-02-25ipvs: unify the formula to estimate the overhead of processing connectionsChangli Gao4-63/+13
2011-02-24ipvs: use enum to instead of magic numbersChangli Gao1-14/+27
2011-02-22ipvs: use hlist instead of listChangli Gao1-23/+29
2011-02-19Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller5-22/+54
2011-02-17netfilter: tproxy: do not assign timewait sockets to skb->skFlorian Westphal3-19/+43
2011-02-16ipvs: make "no destination available" message more informativePatrick Schaaf10-14/+41
2011-02-16ipvs: remove extra lookups for ICMP packetsJulian Anastasov1-25/+3
2011-02-16ipvs: fix timer in get_curr_sync_buffTinggong Wang1-2/+2
2011-02-15netfilter: nfnetlink_log: remove unused parameterFlorian Westphal1-2/+1
2011-02-14netfilter: nf_iterate: fix incorrect RCU usagePatrick McHardy1-1/+2
2011-02-14netfilter: xt_conntrack: warn about use in raw tableJan Engelhardt1-0/+5
2011-02-14Revert "netfilter: xt_connlimit: connlimit-above early loop termination"Stefan Berger1-10/+3
2011-02-11netfilter: xt_connlimit: connlimit-above early loop terminationStefan Berger1-3/+10
2011-02-10netfilter: ipset: add dependency on CONFIG_NETFILTER_NETLINKPatrick McHardy1-0/+1
2011-02-09Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller2-2/+2
2011-02-09netfilter: nf_conntrack: set conntrack templates again if we return NF_REPEATPablo Neira Ayuso1-2/+9
2011-02-07IPVS: precedence bug in ip_vs_sync_switch_mode()Dan Carpenter1-1/+1
2011-02-04Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller3-9/+11
2011-02-03IPVS: Use correct lock in SCTP moduleSimon Horman1-1/+1
2011-02-02Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/...David S. Miller25-31/+8321
2011-02-03netfilter: xtables: add device group matchPatrick McHardy3-0/+92
2011-02-02netfilter: ipset: send error message manuallyJozsef Kadlecsik1-7/+26
2011-02-02netfilter: ipset: fix linking with CONFIG_IPV6=nPatrick McHardy1-6/+9
2011-02-02netfilter: ipset: add missing break statemtns in ip_set_get_ip_port()Patrick McHardy1-0/+2
2011-02-01IPVS: Remove ip_vs_sync_cleanup from section __exitSimon Horman1-1/+1
2011-02-01IPVS: Allow compilation with CONFIG_SYSCTL disabledSimon Horman3-25/+29