aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter/xt_socket.c
AgeCommit message (Expand)AuthorFilesLines
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Gravatar Thomas Gleixner 1-5/+1
2018-09-28netfilter: xt_socket: check sk before checking for netns.Gravatar Flavio Leitner 1-2/+2
2018-06-28netfilter: check if the socket netns is correct.Gravatar Flavio Leitner 1-0/+8
2018-06-03netfilter: Decrease code duplication regarding transparent socket optionGravatar Máté Eckl 1-2/+2
2018-02-14netfilter: x_tables: use pr ratelimiting in all remaining spotsGravatar Florian Westphal 1-4/+6
2017-09-26netfilter: xt_socket: Restore mark from full sockets onlyGravatar Subash Abhinov Kasiviswanathan 1-2/+2
2017-04-24netfilter: xt_socket: Fix broken IPv6 handlingGravatar Peter Tirsek 1-1/+1
2016-12-06netfilter: defrag: only register defrag functionality if neededGravatar Florian Westphal 1-5/+28
2016-11-03netfilter: x_tables: move hook state into xt_action_param structureGravatar Pablo Neira Ayuso 1-2/+2
2016-11-01netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.cGravatar Pablo Neira Ayuso 1-295/+10
2016-04-04tcp/dccp: do not touch listener sk_refcnt under synfloodGravatar Eric Dumazet 1-3/+3
2016-02-11inet: refactor inet[6]_lookup functions to take skbGravatar Craig Gallek 1-7/+21
2015-09-18netfilter: x_tables: Use par->net instead of computing from the passed net de...Gravatar Eric W. Biederman 1-6/+8
2015-06-18netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flagGravatar Harout Hedeshian 1-6/+53
2015-04-08netfilter: x_tables: don't extract flow keys on early demuxed sks in socket m...Gravatar Daniel Borkmann 1-45/+50
2015-03-17netfilter: xt_socket: prepare for TCP_NEW_SYN_RECV supportGravatar Eric Dumazet 1-12/+22
2015-02-16netfilter: xt_socket: fix a stack corruption bugGravatar Eric Dumazet 1-9/+12
2013-10-17netfilter: xt_socket: use sock_gen_put()Gravatar Eric Dumazet 1-11/+2
2013-10-09ipv6: make lookups simpler and fasterGravatar Eric Dumazet 1-1/+1
2013-08-20Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...Gravatar David S. Miller 1-5/+61
2013-07-31netfilter: tproxy: remove nf_tproxy_core.hGravatar Florian Westphal 1-5/+61
2013-07-15netfilter: xt_socket: fix broken v0 supportGravatar Eric Dumazet 1-3/+7
2013-06-20netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flagGravatar Eric Dumazet 1-8/+62
2013-05-23netfilter: xt_socket: use IP early demuxGravatar Eric Dumazet 1-10/+16
2012-09-03netfilter: xt_socket: fix compilation warnings with gcc 4.7Gravatar Pablo Neira Ayuso 1-6/+6
2012-05-09netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()Gravatar Hans Schillstrom 1-2/+2
2011-12-16net:netfilter: use IS_ENABLEDGravatar Igor Maravić 1-2/+2
2011-12-03ipv6: Add fragment reporting to ipv6_skip_exthdr().Gravatar Jesse Gross 1-1/+3
2011-06-06netfilter: add more values to enum ip_conntrack_infoGravatar Eric Dumazet 1-2/+2
2011-02-17netfilter: tproxy: do not assign timewait sockets to skb->skGravatar Florian Westphal 1-2/+11
2010-10-28netfilter: xt_socket: Make tproto signed in socket_mt6_v1().Gravatar David S. Miller 1-4/+3
2010-10-25netfilter: fix module dependency issues with IPv6 defragmentation, ip6tables ...Gravatar KOVACS Krisztian 1-4/+8
2010-10-21tproxy: added IPv6 support to the socket matchGravatar Balazs Scheidler 1-11/+154
2010-10-21tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the...Gravatar Balazs Scheidler 1-1/+1
2010-06-08netfilter: nf_conntrack: IPS_UNTRACKED bitGravatar Eric Dumazet 1-1/+1
2010-05-11netfilter: xtables: deconstify struct xt_action_param for matchesGravatar Jan Engelhardt 1-3/+3
2010-05-11netfilter: xtables: substitute temporary defines by final nameGravatar Jan Engelhardt 1-3/+3
2010-03-25netfilter: xt extensions: use pr_<level> (2)Gravatar Jan Engelhardt 1-3/+2
2009-10-29netfilter: xt_socket: make module available for INPUT chainGravatar Jan Engelhardt 1-2/+4
2009-10-18inet: rename some inet_sock fieldsGravatar Eric Dumazet 1-1/+1
2009-06-09netfilter: xt_socket: added new revision of the 'socket' match supporting flagsGravatar Laszlo Attila Toth 1-11/+52
2008-12-07tproxy: fixe a possible read from an invalid location in the socket matchGravatar Balazs Scheidler 1-1/+1
2008-10-08netfilter: xtables: move extension arguments into compound structure (1/6)Gravatar Jan Engelhardt 1-9/+2
2008-10-08netfilter: iptables socket matchGravatar KOVACS Krisztian 1-0/+192