aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2013-07-08ipvs: SCTP ports should be writable in ICMP packetsJulian Anastasov
2013-07-08netfilter: xt_TCPMSS: Fix IPv6 default MSS tooPhil Oester
2013-07-08netfilter: xt_TCPMSS: Fix missing fragmentation handlingPhil Oester
2013-07-08netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr()Pablo Neira Ayuso
2013-07-08netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS optionPhil Oester
2013-07-08netfilter: nfnetlink_acct: fix incomplete dumping of objectsPablo Neira Ayuso
2013-07-08netfilter: nfnetlink_cttimeout: fix incomplete dumping of objectsPablo Neira Ayuso
2013-07-08ipvs: info leak in __ip_vs_get_dest_entries()Dan Carpenter
2013-07-08netfilter: xt_LOG: fix mark logging for IPv6 packetsMichal Kubeček
2013-07-08netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6Florian Westphal
2013-07-08netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundaryPablo Neira Ayuso
2013-05-28ipvs: ip_vs_sip_fill_param() BUG: bad check of return valueHans Schillstrom
2012-12-12netfilter: Validate the sequence number of dataless ACK packets as wellJozsef Kadlecsik
2012-12-12netfilter: Mark SYN/ACK packets as invalid from original directionJozsef Kadlecsik
2012-11-13netfilter: nfnetlink_log: fix NLA_PUT macro removal bugPatrick McHardy
2012-11-13netfilter: nf_conntrack: fix racy timer handling with reliable eventsPablo Neira Ayuso
2012-11-13netfilter: xt_limit: have r->cost != 0 case workJan Engelhardt
2012-11-13netfilter: nf_ct_expect: fix possible access to uninitialized timerPablo Neira Ayuso
2012-10-02ipvs: fix info leak in getsockopt(IP_VS_SO_GET_TIMEOUT)Mathias Krause
2012-07-17ipvs: fix oops in ip_vs_dst_event on rmmodJulian Anastasov
2012-07-09netfilter: ipset: timeout fixing bug broke SET target special timeout valueJozsef Kadlecsik
2012-06-29netfilter: nfnetlink: fix missing rcu_read_unlock in nfnetlink_rcv_msgTomasz Bursztyka
2012-06-29netfilter: ipset: fix crash if IPSET_CMD_NONE command is sentTomasz Bursztyka
2012-06-25netfilter: ipvs: fix dst leak in __ip_vs_addr_is_local_v6Eric Dumazet
2012-06-25netfilter: ipset: fix interface comparision in hash-netiface setsFlorian Westphal
2012-06-07netfilter: nf_ct_h323: fix bug in rtcp nattingPablo Neira Ayuso
2012-06-07netfilter: xt_HMARK: fix endianness and provide consistent hashingHans Schillstrom
2012-05-22Merge branch 'for-3.5' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/pe...Linus Torvalds
2012-05-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2012-05-17netfilter: nf_ct_h323: fix usage of MODULE_ALIAS_NFCT_HELPERPablo Neira Ayuso
2012-05-17netfilter: xt_CT: remove redundant header includeEldad Zack
2012-05-17netfilter: ipset: fix timeout value overflow bugJozsef Kadlecsik
2012-05-17netfilter: nf_ct_tcp: extend log message for invalid ignored packetsPablo Neira Ayuso
2012-05-17netfilter: xt_HMARK: modulus is expensive for hash calculationPablo Neira Ayuso
2012-05-17netfilter: xt_HMARK: potential NULL dereference in get_inner_hdr()Dan Carpenter
2012-05-17netfilter: xt_hashlimit: use _ALL macro to reject unknown flag bitsFlorian Westphal
2012-05-16netfilter: ipset: fix hash size checking in kernelJozsef Kadlecsik
2012-05-15net: Convert net_ratelimit uses to net_<level>_ratelimitedJoe Perches
2012-05-14net: replace percpu_xxx funcs with this_cpu_xxx or __this_cpu_xxxAlex Shi
2012-05-09netfilter: Convert compare_ether_addr to ether_addr_equalJoe Perches
2012-05-09netfilter: hashlimit: byte-based limit modeFlorian Westphal
2012-05-09netfilter: hashlimit: move rateinfo initialization to helperFlorian Westphal
2012-05-09netfilter: limit, hashlimit: avoid duplicated inlineFlorian Westphal
2012-05-09netfilter: add xt_hmark target for hash-based skb markingHans Schillstrom
2012-05-09netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()Hans Schillstrom
2012-05-08netfilter: nf_conntrack: fix explicit helper attachment and NATPablo Neira Ayuso
2012-05-08netfilter: nf_ct_expect: partially implement ctnetlink_change_expectKelvie Wong
2012-05-08ipvs: ip_vs_proto: local functions should not be exposed globallyH Hartley Sweeten
2012-05-08ipvs: ip_vs_ftp: local functions should not be exposed globallyH Hartley Sweeten
2012-05-08ipvs: optimize the use of flags in ip_vs_bind_destPablo Neira Ayuso