aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2006-04-01[NETFILTER]: iptables 32bit compat layerDmitry Mishin1-131/+1007
2006-04-01[NETFILTER]: {ip,nf}_conntrack_netlink: fix expectation notifier unregistrationMartin Josefsson1-1/+1
2006-04-01[NETFILTER]: x_tables: unify IPv4/IPv6 multiport matchYasuyuki Kozakai3-206/+0
2006-04-01[NETFILTER]: x_tables: unify IPv4/IPv6 esp matchYasuyuki Kozakai3-116/+5
2006-03-28[NETFILTER]: Rename init functions.Andrew Morton49-200/+200
2006-03-27[PATCH] Notifier chain update: API changesAlan Stern1-3/+3
2006-03-26[PATCH] sem2mutex: misc static one-file mutexesIngo Molnar1-4/+5
2006-03-24[PATCH] s/;;/;/gAlexey Dobriyan1-1/+1
2006-03-22[NETFILTER]: Fix undefined references to get_h225_addrPatrick McHardy1-2/+2
2006-03-22[NETFILTER]: nf_conntrack: support for layer 3 protocol load on demandPablo Neira Ayuso1-0/+1
2006-03-22[NETFILTER]: x_tables: set the protocol family in x_tables targets/matchesPablo Neira Ayuso2-8/+13
2006-03-22[NETFILTER]: conntrack: cleanup the conntrack ID initializationPablo Neira Ayuso1-2/+2
2006-03-22[NETFILTER]: ctnetlink: Fix expectaction mask dumpingPablo Neira Ayuso1-17/+55
2006-03-20[NETFILTER]: Add H.323 conntrack/NAT helperJing Min Zhao8-0/+6199
2006-03-20[NETFILTER]: Fix warnings in ip_nat_snmp_basic.cDavid S. Miller1-1/+4
2006-03-20[NET]: sem2mutex part 2Ingo Molnar2-2/+2
2006-03-20[NET] sem2mutex: net/Arjan van de Ven1-5/+6
2006-03-20[NETFILTER]: Fix skb->nf_bridge lifetime issuesPatrick McHardy1-4/+0
2006-03-20[NETFILTER]: ctnetlink: avoid unneccessary event message generationPatrick McHardy1-3/+4
2006-03-20[NETFILTER]: x_tables: replace IPv4/IPv6 policy match by address family indep...Patrick McHardy3-185/+0
2006-03-20[NETFILTER]: x_tables: add xt_{match,target} arguments to match/target functionsPatrick McHardy30-22/+81
2006-03-20[NETFILTER]: x_tables: pass registered match/target data to match/target func...Patrick McHardy2-8/+10
2006-03-20[NETFILTER]: Convert arp_tables targets to centralized error checkingPatrick McHardy2-6/+8
2006-03-20[NETFILTER]: Convert ip_tables matches/targets to centralized error checkingPatrick McHardy28-390/+103
2006-03-20[NETFILTER]: Change {ip,ip6,arp}_tables to use centralized error checkingPatrick McHardy2-8/+29
2006-03-20[NETFILTER]: Fix CID offset bug in PPTP NAT helper debug messageHolger Eitzenberger1-3/+5
2006-03-20[NETFILTER] nf_conntrack: clean up to reduce size of 'struct nf_conn'Harald Welte1-10/+12
2006-03-12[NETFILTER]: arp_tables: fix NULL pointer dereferencePatrick McHardy1-1/+1
2006-03-07[NETFILTER] ip_queue: Fix wrong skb->len == nlmsg_len assumptionThomas Graf1-1/+1
2006-02-27[NETFILTER]: Restore {ipt,ip6t,ebt}_LOG compatibilityPatrick McHardy1-1/+6
2006-02-19[NETFILTER]: Fix outgoing redirects to loopbackPatrick McHardy1-11/+5
2006-02-19[NETFILTER]: Fix NAT PMTUD problemsPatrick McHardy1-9/+9
2006-02-15[NETFILTER]: nf_conntrack: move registration of __nf_ct_attachYasuyuki Kozakai1-5/+0
2006-02-15[NETFILTER]: Fix xfrm lookup after SNATPatrick McHardy1-3/+3
2006-02-04[NETFILTER]: Fix check whether dst_entry needs to be released after NATPatrick McHardy1-2/+2
2006-02-04[NETFILTER]: Prepare {ipt,ip6t}_policy match for x_tables unificationPatrick McHardy1-3/+6
2006-02-04[NETFILTER]: Check policy length in policy match strict modePatrick McHardy1-1/+1
2006-02-04[NETFILTER]: Fix possible overflow in netfilters do_replace()Kirill Korotaev2-0/+14
2006-02-04[NETFILTER]: Fix missing src port initialization in tftp expectation maskPatrick McHardy1-0/+1
2006-02-04[NETFILTER]: Fix undersized skb allocation in ipt_ULOG/ebt_ulog/nfnetlink_logPatrick McHardy1-8/+12
2006-02-04[NETFILTER]: ULOG/nfnetlink_log: Use better default value for 'nlbufsiz'Holger Eitzenberger1-1/+5
2006-02-04[NETFILTER]: ctnetlink: add MODULE_ALIAS for expectation subsystemPablo Neira Ayuso1-0/+1
2006-02-04[NETFILTER]: ctnetlink: Fix subsystem used for expectation eventsMarcus Sundberg1-1/+1
2006-01-17[NETFILTER]: ip_conntrack_proto_gre.c needs linux/interrupt.hDavid S. Miller1-0/+1
2006-01-17[NETFILTER] Makefile cleanupYasuyuki Kozakai1-1/+0
2006-01-17[NETFILTER] ip[6]t_policy: Fix compilation warningsBenoit Boissinot1-2/+5
2006-01-12[NETFILTER] x_tables: Abstraction layer for {ip,ip6,arp}_tablesHarald Welte60-3995/+245
2006-01-11[PATCH] capable/capability.h (net/)Randy Dunlap2-0/+2
2006-01-11[NETFILTER]: ip_ct_proto_gre_fini() cannot be __exitDavid S. Miller2-2/+5
2006-01-11netfilter: headers included twiceNicolas Kaiser3-3/+0
2006-01-10[NETFILTER]: Fix timeout sysctls on big-endian 64bit architecturesPatrick McHardy7-37/+37
2006-01-10[NETFILTER]: Remove unused function from NAT protocol helpersPatrick McHardy5-160/+0
2006-01-10[NETFILTER]: Fix return value confusion in PPTP NAT helperPatrick McHardy1-23/+13
2006-01-10[NETFILTER]: Fix another crash in ip_nat_pptpPatrick McHardy1-30/+27
2006-01-10[NETFILTER]: Fix crash in ip_nat_pptpPatrick McHardy1-1/+1
2006-01-10[NET]: Change memcmp(,,ETH_ALEN) to compare_ether_addr()Kris Katterjohn1-2/+3
2006-01-10spelling: s/trough/through/Adrian Bunk1-2/+2
2006-01-07[NETFILTER]: ip_conntrack_proto_sctp.c needs linux/interrupt.hJoe Kappus1-0/+1
2006-01-07[NETFILTER]: Add ipt_policy/ip6t_policy matchesPatrick McHardy3-0/+181
2006-01-07[NETFILTER]: Handle NAT in IPsec policy checksPatrick McHardy1-2/+48
2006-01-07[NETFILTER]: Redo policy lookups after NAT when neccessaryPatrick McHardy1-2/+25
2006-01-07[NETFILTER]: Use conntrack information to determine if packet was NATedPatrick McHardy1-15/+19
2006-01-06Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6Linus Torvalds1-0/+1
2006-01-06[NETFILTER]: ipt_helper.c needs linux/interrupt.hJoe1-0/+1
2006-01-06kbuild: un-stringnify KBUILD_MODNAMESam Ravnborg2-2/+2
2006-01-05[NETFILTER]: Use HOPLIMIT metric as TTL of TCP reset sent by REJECTYasuyuki Kozakai1-1/+1
2006-01-05[NETFILTER]: nf_conntrack_l3proto_ipv4.c needs net/route.hPatrick McHardy1-0/+1
2006-01-05[NETFILTER]: Call POST_ROUTING hook before fragmentationPatrick McHardy3-67/+2
2006-01-05[NETFILTER]: ctnetlink: Fix dumping of helper namePatrick McHardy1-1/+1
2006-01-05[NETFILTER]: Fix module_param types and permissionsPatrick McHardy6-25/+21
2006-01-05[NETFILTER]: Add ctnetlink port for nf_conntrackPablo Neira Ayuso2-18/+126
2006-01-05[NETFILTER]: ctnetlink: remove unused variablePablo Neira Ayuso1-2/+0
2006-01-05[NETFILTER]: ctnetlink: fix conntrack mark racePablo Neira Ayuso1-5/+5
2006-01-05[NETFILTER]: ctnetlink: ctnetlink_event cleanupPablo Neira Ayuso1-11/+4
2006-01-05[NETFILTER]: ctnetlink: use u_int32_t instead of unsigned intPablo Neira Ayuso1-1/+1
2006-01-05[NETFILTER]: ctnetlink: propagate ctnetlink_dump_tuples_proto return value backPablo Neira Ayuso1-2/+3
2006-01-05[NETFILTER]: ctnetlink: Add sanity checkings for ICMPYasuyuki Kozakai1-19/+24
2006-01-05[NETFILTER]: ctnetlink: remove bogus checks in ICMP protocol at dumpingPablo Neira Ayuso1-4/+0
2006-01-03[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.hArnaldo Carvalho de Melo7-0/+10
2006-01-03[NETFILTER] ip_tables: NUMA-aware allocationEric Dumazet2-118/+256
2005-12-19[NETFILTER]: Fix NAT init orderPatrick McHardy1-1/+2
2005-12-12[NETFILTER]: ip_nat_tftp: Fix expectation NATMarcus Sundberg1-1/+4
2005-12-05[NETFILTER]: Don't use conntrack entry after dropping the referencePatrick McHardy1-4/+2
2005-12-05[NETFILTER]: Fix unbalanced read_unlock_bh in ctnetlinkPatrick McHardy1-1/+2
2005-12-05[NETFILTER]: Mark ctnetlink as EXPERIMENTALPatrick McHardy1-4/+4
2005-12-05[NETFILTER]: Fix CTA_PROTO_NUM attribute size in ctnetlinkPatrick McHardy1-2/+2
2005-12-05[NETFILTER]: Fix ip_conntrack_flush abuse in ctnetlinkPatrick McHardy1-9/+11
2005-12-05[NETFILTER]: Fix incorrect argument to ip_nat_initialized() in ctnetlinkPablo Neira Ayuso1-1/+1
2005-12-01[NETFILTER]: Fix recent match jiffies wrap mismatchesPhil Oester1-0/+1
2005-12-01[NETFILTER]: Ignore ACKs ACKs on half open connections in TCP conntrackJozsef Kadlecsik1-9/+20
2005-11-29[NETFILTER] ipv4: small cleanupsAdrian Bunk3-4/+4
2005-11-29[NET]: Add const markers to various variables.Arjan van de Ven8-12/+12
2005-11-23[NETFILTER]: ip_conntrack_netlink.c needs linux/interrupt.hBenoit Boissinot1-0/+1
2005-11-22[NETFILTER] ctnetlink: Fix refcount leak ip_conntrack/nat_protoPablo Neira Ayuso1-12/+12
2005-11-20[NETFILTER]: fixed dependencies between modules related with ip_conntrackYasuyuki Kozakai1-5/+5
2005-11-17[NETFILTER] ip_conntrack: fix ftp/irc/tftp helpers on ports >= 32768Harald Welte3-6/+6
2005-11-14[NETFILTER] nfnetlink: unconditionally require CAP_NET_ADMINHarald Welte1-14/+7
2005-11-14[NETFILTER] ctnetlink: More thorough size checking of attributesPablo Neira Ayuso2-0/+46
2005-11-14[NETFILTER] ctnetlink: use size_t to make gcc-4.x happyPablo Neira Ayuso1-3/+3
2005-11-12[NETFILTER] {ip,nf}_conntrack TCP: Accept SYN+PUSH like SYNVlad Drukker1-0/+1
2005-11-10[NET]: Detect hardware rx checksum faults correctlyHerbert Xu1-7/+4
2005-11-09[NETFILTER]: Add nf_conntrack subsystem.Yasuyuki Kozakai13-58/+1106
2005-11-09[NETFILTER] ctnetlink: ICMP_ID is u_int16_t not u_int8_t.Krzysztof Piotr Oledzki1-1/+1
2005-11-09[NETFILTER] ctnetlink: Fix oops when no ICMP ID info in messageKrzysztof Piotr Oledzki1-1/+2
2005-11-09[NETFILTER] ctnetlink: Add support to identify expectations by ID'sPablo Neira Ayuso1-0/+8
2005-11-09[NETFILTER] ctnetlink: propagate error instaed of returning -EPERMPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER] ctnetlink: return -EINVAL if size is wrongPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER]: stop tracking ICMP error at early pointYasuyuki Kozakai1-5/+5
2005-11-09[NETFILTER] PPTP helper: fix PNS-PAC expectation call idPhilip Craig1-2/+26
2005-11-09[NETFILTER] ctnetlink: get_conntrack can use GFP_KERNELPablo Neira Ayuso1-1/+1
2005-11-09[NETFILTER] ctnetlink: kill unused includesPablo Neira Ayuso1-3/+0
2005-11-09[NETFILTER] ctnetlink: add module alias to fix autoloadingPablo Neira Ayuso1-0/+2
2005-11-09[NETFILTER] ctnetlink: add marking support from userspacePablo Neira Ayuso1-0/+10
2005-11-09[NETFILTER] ctnetlink: check if protoinfo is presentPablo Neira Ayuso1-0/+5
2005-11-09[NETFILTER] nfnetlink: nfattr_parse() can never fail, make it voidHarald Welte2-42/+9
2005-11-09[NETFILTER]: refcount leak of proto when ctnetlink dumping tupleYasuyuki Kozakai1-3/+6
2005-11-09[NETFILTER]: packet counter of conntrack is 32bitsYasuyuki Kozakai1-1/+1
2005-11-08[NET]: kfree cleanupJesper Juhl1-2/+1
2005-11-05[NETFILTER]: CONNMARK target needs ip_conntrackHarald Welte1-0/+1
2005-11-05[NETFILTER]: Fix double free after netlink_unicast() in ctnetlinkHarald Welte1-12/+7
2005-11-05[NETFILTER] NAT: Fix module refcount dropping too farHarald Welte2-5/+3
2005-11-04[NETFILTER] PPTP helper: Fix endianness bug in GRE key / CallID NATHarald Welte1-2/+2
2005-11-04[NETFILTER] PPTP helper: Fix compilation of conntrack helper without NATHarald Welte2-4/+2
2005-10-31[NETFILTER]: Add "revision" support to arp_tables and ip6_tablesHarald Welte1-70/+131
2005-10-30[PATCH] Typo fix: dot after newline in printk stringsJean Delvare1-1/+1
2005-10-26[NETFILTER] ip_conntrack: Make "hashsize" conntrack parameter writableHarald Welte1-37/+95
2005-10-13[NETFILTER]: Fix OOPSes on machines with discontiguous cpu numbering.David S. Miller2-11/+20
2005-10-10[NETFILTER] ctnetlink: add support to change protocol infoPablo Neira Ayuso1-0/+37
2005-10-10[NETFILTER] ctnetlink: allow userspace to change TCP statePablo Neira Ayuso1-0/+23
2005-10-10[NETFILTER]: Use only 32bit counters for CONNTRACK_ACCTHarald Welte2-9/+12
2005-10-10[NETFILTER] ctnetlink: add one nesting level for TCP statePablo Neira Ayuso1-0/+4
2005-10-10[NETFILTER] ctnetlink: ICMP ID is not mandatoryPablo Neira Ayuso1-2/+1
2005-10-10[NETFILTER] conntrack_netlink: Fix endian issue with status from userspaceHarald Welte1-1/+2
2005-10-10[NETFILTER] ipt_ULOG: Mark ipt_ULOG as OBSOLETEHarald Welte1-1/+6
2005-10-10[NETFILTER] PPTP helper: Add missing Kconfig dependencyHarald Welte1-0/+1
2005-10-04[NETFILTER]: Fix Kconfig typoHorst H. von Brand1-1/+1
2005-10-03[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnlHerbert Xu2-2/+2
2005-10-03[NET]: Fix packet timestamping.Herbert Xu2-4/+4
2005-09-26[NETFILTER]: Fix invalid module autoloading by splitting iptable_natHarald Welte4-34/+35
2005-09-24[NETFILTER] ip_conntrack: Update event cache when status changesHarald Welte3-1/+4
2005-09-24[NETFILTER]: Fix ip[6]t_NFQUEUE Kconfig dependencyHarald Welte2-1/+12
2005-09-22[NETFILTER] Fix conntrack event cache deadlock/oopsHarald Welte5-28/+28
2005-09-22[NETFILTER] Fix sparse endian warnings in pptp helperAlexey Dobriyan1-6/+8
2005-09-22[NETFILTER] fix DEBUG statement in PPTP helperHarald Welte1-1/+1
2005-09-19[NETFILTER]: Export ip_nat_port_{nfattr_to_range,range_to_nfattr}Harald Welte1-0/+2
2005-09-19[NETFILTER]: Rename misnamed functionPatrick McHardy3-5/+5
2005-09-19[NETFILTER]: Add new PPTP conntrack and NAT helperHarald Welte6-0/+1774
2005-09-18[NETFILTER]: Solve Kconfig dependency problemHarald Welte1-3/+1
2005-09-17[NETFILTER] Fix Kconfig dependencies for nfnetlink/ctnetlinkHarald Welte1-6/+10
2005-09-16[NETFILTER]: Fix oops in conntrack event cacheHarald Welte1-1/+4
2005-09-16[NETFILTER] CLUSTERIP: use a bitmap to store node responsibility dataKOVACS Krisztian1-82/+61
2005-09-16[NETFILTER] CLUSTERIP: introduce reference counting for entriesKOVACS Krisztian1-18/+62
2005-09-13[NETFILTER]: Fix DHCP + MASQUERADE problemPatrick McHardy1-0/+6
2005-09-13[NETFILTER]: Fix rcu race in ipt_REDIRECTPatrick McHardy1-6/+10
2005-09-13[NETFILTER]: Simplify netbios helperPatrick McHardy1-12/+7
2005-09-13[NETFILTER]: Use correct type for "ports" module parameterPatrick McHardy3-9/+9
2005-09-09[PATCH] files: lock-free fd look-upDipankar Sarma1-0/+1
2005-09-08[XFRM]: Always release dst_entry on error in xfrm_lookupPatrick McHardy1-4/+1
2005-09-08[NETFILTER]: ip_conntrack_netbios_ns.c gcc-2.95.x build fixAndrew Morton1-4/+20
2005-09-06[NETFILTER]: Missing unlock in TCP connection tracking error pathPatrick McHardy1-0/+1
2005-09-06[NETFILTER]: kill __ip_ct_expect_unlink_destroyPablo Neira Ayuso3-18/+16
2005-09-06[NETFILTER]: Don't increase master refcount on expectationsPablo Neira Ayuso1-4/+4
2005-09-06[NETFILTER]: Handle NAT module load racePatrick McHardy2-2/+27
2005-09-06[NETFILTER]: Fix CONNMARK Kconfig dependencyYasuyuki Kozakai1-0/+1
2005-09-06[NETFILTER]: Add NetBIOS name service helperPatrick McHardy3-0/+151
2005-09-06[NETFILTER]: Add support for permanent expectationsPatrick McHardy6-4/+13
2005-09-01[NETFILTER]: CLUSTERIP: fix memcpy() length typoKOVACS Krisztian1-1/+1
2005-08-29[NETFILTER]: Add new iptables TTL targetHarald Welte3-0/+134
2005-08-29[NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointersEric Dumazet2-3/+3
2005-08-29[LIB]: Make TEXTSEARCH_BM plain tristate like the othersDavid S. Miller1-0/+1
2005-08-29[NETFILTER]: Add goto targetPatrick McHardy1-2/+2
2005-08-29[NETFILTER]: Add string matchPablo Neira Ayuso3-0/+104
2005-08-29[NETLINK]: Add "groups" argument to netlink_kernel_createPatrick McHardy2-2/+3
2005-08-29[NETLINK]: Convert netlink users to use group numbers instead of bitmasksPatrick McHardy2-10/+10
2005-08-29[NETFILTER]: Remove tasklist_lock abuse in ipt{,6}ownerChristoph Hellwig1-125/+7
2005-08-29[NETFILTER]: Make NETMAP target usable in OUTPUTGary Wayne Smith1-3/+5
2005-08-29[NETFILTER]: Don't exclude local packets from MASQUERADINGPatrick McHardy1-5/+0
2005-08-29[NET]: Store skb->timestamp as offset to a base timestampPatrick McHardy2-6/+6
2005-08-29[NETFILTER]: Nicer names for ipt_connbytes constantsPatrick McHardy1-6/+6
2005-08-29[NETFILTER]: Fix div64_64 in ipt_connbytesPatrick McHardy1-14/+10
2005-08-29[NETFILTER]: Add new iptables "connbytes" matchHarald Welte3-1/+177
2005-08-29[NETFILTER]: New iptables DCCP protocol header matchHarald Welte3-0/+188
2005-08-29[NETFILTER]: return ENOMEM when ip_conntrack_alloc() fails.Yasuyuki Kozakai1-3/+4
2005-08-29[NETFILTER]: add /proc/net/netfilter interface to nf_queueHarald Welte1-2/+7
2005-08-29[NETFILTER]: ip{6}_queue: prevent unregistration race with nfnetlink_queueHarald Welte1-1/+1
2005-08-29[NETFILTER]: move conntrack helper buffers from BSS to kmalloc()ed memoryHarald Welte3-5/+29
2005-08-29[NETFILTER]: fix list traversal order in ctnetlinkPablo Neira Ayuso1-3/+3
2005-08-29[NETFILTER]: Fix typo in ctnl_exp_cb array (no bug, just memory waste)Pablo Neira Ayuso1-1/+1
2005-08-29[NETFILTER]: fix conntrack refcount leak in unlink_expect()Pablo Neira Ayuso1-0/+1
2005-08-29[NETFILTER]: ctnetlink: make sure event order is correctPablo Neira Ayuso1-1/+1
2005-08-29[NETFILTER]: don't use nested attributes for conntrack_expectHarald Welte1-46/+39
2005-08-29[NETFILTER]: attribute count is an attribute of message type, not subsytemHarald Welte1-2/+7
2005-08-29[NETFILTER]: fix ctnetlink 'create_expect' parsingHarald Welte1-1/+1
2005-08-29[NETFILTER]: conntrack_netlink: Fix locking during conntrack_createPablo Neira1-6/+7
2005-08-29[NETFILTER]: remove bogus memset() calls from ip_conntrack_netlink.cPablo Neira1-8/+0
2005-08-29[NETFILTER]: Fix multiple problems with the conntrack event cachePatrick McHardy2-69/+39
2005-08-29[NETFILTER]: Extend netfilter logging APIHarald Welte5-64/+90
2005-08-29[NETFILTER]: Add "nfnetlink_queue" netfilter queue handler over nfnetlinkHarald Welte3-1/+76
2005-08-29[NETFILTER]: Core changes required by upcoming nfnetlink_queue codeHarald Welte1-1/+2
2005-08-29[NETFILTER]: Move reroute-after-queue code up to the nf_queue layer.Harald Welte1-27/+0