| netfilter 29/29: fix warning in net/netfilter/nf_conntrack_ftp.c |
2008-11-27 |
Patrick McHardy |
davem |
Accepted |
| netfilter 29/31: ip6t_eui: fix read outside array bounds |
2009-09-10 |
Patrick McHardy |
davem |
Accepted |
| netfilter 29/31: passive OS fingerprint xtables match |
2009-06-10 |
Patrick McHardy |
davem |
Accepted |
| netfilter 29/41: ctnetlink: move event reporting for new entries outside the lock |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 29/62: nf_conntrack: support conntrack templates |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 30/31: xt_socket: added new revision of the 'socket' match supporting flags |
2009-06-10 |
Patrick McHardy |
davem |
Accepted |
| netfilter 30/41: auto-load ip6_queue module when socket opened |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 30/62: xtables: add CT target |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 31/31: ebt_ulog: fix checkentry return value |
2009-09-10 |
Patrick McHardy |
davem |
Accepted |
| netfilter 31/31: nf_conntrack: use per-conntrack locks for protocol data |
2009-06-10 |
Patrick McHardy |
davem |
Accepted |
| netfilter 31/41: auto-load ip_queue module when socket opened |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 31/62: fix build failure with CONNTRACK=y NAT=n |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 32/41: xtables: avoid pointer to self |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 32/62: xtables: consistent struct compat_xt_counters definition |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 33/62: xtables: symmetric COMPAT_XT_ALIGN definition |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 34/62: ctnetlink: add missing netlink attribute policies |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 35/41: xtables: add cluster match |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 35/62: xtables: compact table hook functions (1/2) |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 36/41: ctnetlink: remove remaining module refcounting |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 36/62: xtables: compact table hook functions (2/2) |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 37/41: remove nf_ct_l4proto_find_get/nf_ct_l4proto_put |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 37/62: xtables: use xt_table for hook instantiation |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 38/41: ctnetlink: fix rcu context imbalance |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 38/62: xtables: generate initial table on-demand |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 39/41: sysctl support of logger choice |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 39/62: ctnetlink: dump expectation helper name |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 40/62: nf_conntrack: show helper and class in /proc/net/nf_conntrack_expect |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 41/41: nf_conntrack: Reduce conntrack count in nf_conntrack_free() |
2009-03-24 |
Patrick McHardy |
davem |
Accepted |
| netfilter 41/62: nf_conntrack_sip: fix ct_sip_parse_request() REGISTER request parsing |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 42/62: nf_conntrack_sip: pass data offset to NAT functions |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 43/62: nf_conntrack_sip: add TCP support |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 44/62: nf_nat: support mangling a single TCP packet multiple times |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 45/62: nf_nat_sip: add TCP support |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 46/62: nf_conntrack_sip: add T.38 FAX support |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 47/62: xtables: fix mangle tables |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 48/62: nf_conntrack: elegantly simplify nf_ct_exp_net() |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 49/62: don't use INIT_RCU_HEAD() |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 50/62: xt_recent: inform user when hitcount is too large |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 51/62: iptables: remove unused function arguments |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 52/62: reduce NF_HOOK by one argument |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 53/62: get rid of the grossness in netfilter.h |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 54/62: xtables: print details on size mismatch |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 55/62: xtables: constify args in compat copying functions |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 56/62: xtables: add const qualifiers |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 57/62: nf_conntrack: pass template to l4proto ->error() handler |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 58/62: nf_conntrack: add support for "conntrack zones" |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 59/62: ctnetlink: add zone support |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 60/62: ebtables: abort if next_offset is too small |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 61/62: ebtables: avoid explicit XT_ALIGN() in match/targets |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter 62/62: CONFIG_COMPAT: allow delta to exceed 32767 |
2010-02-16 |
Patrick McHardy |
davem |
Accepted |
| netfilter spurious ELOOP |
2009-03-25 |
Patrick McHardy |
davem |
Not Applicable |
| netfilter, ipvs: Avoid undefined order of evaluation in assignments to struct nf_conn * |
2011-05-29 |
Jesper Juhl |
davem |
Not Applicable |
| netfilter/IPv6: fix DSCP mangle code |
2011-04-22 |
Fernando Luis Vázquez Cao |
davem |
Not Applicable |
| netfilter/IPv6: initialize TOS field in REJECT target module |
2011-04-22 |
Fernando Luis Vázquez Cao |
davem |
Not Applicable |
| netfilter/iptables and network interface names |
2010-02-04 |
Jan Engelhardt |
davem |
RFC |
| netfilter/iptables: Fix log-level processing |
2012-09-12 |
Joe Perches |
davem |
Not Applicable |
| netfilter/ipv4: snmp nat leaks memory in case of failure |
2008-10-16 |
Ilpo Järvinen |
davem |
Not Applicable |
| netfilter/xt_CT.c: remove redundant header include |
2012-05-09 |
Eldad Zack |
davem |
Not Applicable |
| netfilter: Add missing CONFIG_SYSCTL checks in ipv6's nf_conntrack_reasm.c |
2010-10-26 |
David Miller |
davem |
Accepted |
| netfilter: Allow xt_nat.c and x_tables.c to compiled in |
2012-09-14 |
Eric W. Biederman |
davem |
Not Applicable |
| netfilter: CLUSTERIP: clusterip_seq_stop() fix |
2010-03-25 |
Eric Dumazet |
davem |
Not Applicable |
| netfilter: CONNMARK: support save the mark of the master connection |
2011-01-27 |
Changli Gao |
davem |
Not Applicable |
| netfilter: Don't leak 'exp' in ctnetlink_create_expect() |
2012-12-26 |
Jesper Juhl |
davem |
Not Applicable |
| netfilter: Fix a unregister_netdevice hang |
2010-02-04 |
Krishna Kumar |
davem |
RFC |
| netfilter: Fix br_nf_pre_routing() in conjunction with bridge-nf-call-ip(6)tables=0 |
2012-01-03 |
Richard Weinberger |
davem |
Not Applicable |
| netfilter: Fix build failure when ipv6 but xt_tproxy is built in |
2011-04-05 |
KOVACS Krisztian |
davem |
Not Applicable |
| netfilter: Fix compiler warning. |
2009-12-10 |
laurent chavey |
davem |
Not Applicable |
| netfilter: Fix compiler warning. |
2009-12-10 |
laurent chavey |
davem |
Not Applicable |
| netfilter: Fix error in ipq_enqueue_packet |
2012-05-02 |
Krishna Kumar |
davem |
Not Applicable |
| netfilter: Only do skb_checksum_help on CHECKSUM_PARTIAL in ip6_queue |
2010-04-08 |
Herbert Xu |
davem |
Not Applicable |
| netfilter: Only do skb_checksum_help on CHECKSUM_PARTIAL in ip_queue |
2010-04-08 |
Herbert Xu |
davem |
Not Applicable |
| netfilter: Only do skb_checksum_help on CHECKSUM_PARTIAL in nfnetlink_queue |
2010-04-08 |
Herbert Xu |
davem |
Not Applicable |
| netfilter: Remove skb_is_nonlinear check from nf_conntrack_sip |
2010-05-14 |
Jason Gunthorpe |
davem |
Not Applicable |
| netfilter: Remove the spurious \ in __ip_vs_lblc_init |
2012-11-19 |
Eric W. Biederman |
davem |
Accepted |
| netfilter: Remove warn_if_extra_mangle |
2008-11-03 |
Simon Arlott |
davem |
Not Applicable |
| netfilter: Should xt_osf_remove_callback() return negative on errors? |
2009-11-11 |
roel kluin |
davem |
Not Applicable |
| netfilter: TCP and raw fix for ip_route_me_harder |
2011-08-07 |
Julian Anastasov |
davem |
Accepted |
| netfilter: Use hlist_add_head_rcu() in nf_conntrack_set_hashsize() |
2009-03-24 |
Eric Dumazet |
davem |
Not Applicable |
| netfilter: Use proper rwlock init function |
2011-10-05 |
Thomas Gleixner |
davem |
Accepted |
| netfilter: Xtables: idletimer target implementation |
2010-06-02 |
Luciano Coelho |
davem |
Not Applicable |
| netfilter: add CHECKSUM target |
2010-07-08 |
Michael S. Tsirkin |
davem |
Not Applicable |
| netfilter: add a missing include in nf_conntrack_reasm.c |
2011-01-20 |
Eric Dumazet |
davem |
Not Applicable |
| netfilter: add my copyright statements |
2013-04-19 |
Pablo Neira |
davem |
Accepted |
| netfilter: avoid double free in nf_reinject |
2011-08-05 |
Julian Anastasov |
davem |
Accepted |
| netfilter: bridge: fix module autoload in compat case |
2012-03-01 |
Pablo Neira |
davem |
Accepted |
| netfilter: bridge: refcount fix |
2009-08-24 |
Eric Dumazet |
davem |
Not Applicable |
| netfilter: bridge: refcount fix |
2009-08-24 |
Eric Dumazet |
davem |
Not Applicable |
| netfilter: change IPS_*_BIT to IPS_* |
2010-11-21 |
Changli Gao |
davem |
Not Applicable |
| netfilter: check the length of the data before dereferencing it |
2012-04-01 |
Changli Gao |
davem |
Not Applicable |
| netfilter: conntrack: death_by_timeout() fix |
2009-06-18 |
Eric Dumazet |
davem |
Not Applicable |
| netfilter: ctnetlink: fix GFP_KERNEL allocation under spinlock |
2008-11-26 |
Patrick McHardy |
davem |
Accepted |
| netfilter: ctnetlink: fix missing CTA_NAT_SEQ_UNSPEC |
2008-12-15 |
Patrick McHardy |
davem |
Accepted |
| netfilter: ctnetlink: fix race between delete and timeout expiration |
2012-03-16 |
Pablo Neira |
davem |
Accepted |
| netfilter: ctnetlink: fix timeout calculation |
2011-12-30 |
Xi Wang |
davem |
Not Applicable |
| netfilter: default to NF_DROP in sip_help_tcp() |
2010-07-10 |
Simon Horman |
davem |
Not Applicable |
| netfilter: define NF_CT_EXT_* as needed |
2010-11-15 |
Changli Gao |
davem |
Not Applicable |
| netfilter: define ct_*_info as needed |
2010-11-14 |
Changli Gao |
davem |
Not Applicable |
| netfilter: define nat_pptp_info as needed |
2010-11-14 |
Changli Gao |
davem |
Not Applicable |
| netfilter: don't disable BH again in BH disabled context |
2010-08-17 |
Changli Gao |
davem |
Not Applicable |
| netfilter: don't do window scaling for a picked up connection |
2012-04-01 |
Changli Gao |
davem |
Not Applicable |