|
[nft] parser_bison: keep snat/dnat existing syntax unchanged
|
- - - |
0 0 0 |
2016-08-22 |
Liping Zhang |
pablo |
Accepted |
|
[nf] netfilter: nft_meta: improve the validity check of pkttype set expr
|
- - - |
0 0 0 |
2016-08-22 |
Liping Zhang |
pablo |
Accepted |
|
[nf,3/3] netfilter: cttimeout: unlink timeout objs in the unconfirmed ct lists
|
- - - |
0 0 0 |
2016-08-22 |
Liping Zhang |
pablo |
Accepted |
|
[nf,2/3] netfilter: cttimeout: put back l4proto when replacing timeout policy
|
- - - |
0 0 0 |
2016-08-22 |
Liping Zhang |
pablo |
Accepted |
|
[nf,1/3] netfilter: nfnetlink: use list_for_each_entry_safe to delete all objects
|
- - - |
0 0 0 |
2016-08-22 |
Liping Zhang |
pablo |
Accepted |
|
[iptables,v2,1/2] xtables-translate: add escape_quotes option to comment_xlate
|
- - - |
0 0 0 |
2016-08-22 |
Pablo M. Bermudo Garay |
pablo |
Accepted |
|
[nft,2/2] ct: display bit number instead of raw value
|
1 - - |
0 0 0 |
2016-08-22 |
Florian Westphal |
pablo |
Accepted |
|
[nft,1/2] ct: allow numeric conntrack labels
|
1 - - |
0 0 0 |
2016-08-22 |
Florian Westphal |
pablo |
Accepted |
|
netfilter: nf_tables: typo in trace attribute definition
|
- - - |
0 0 0 |
2016-08-22 |
Pablo Neira |
pablo |
Accepted |
|
[iptables,1/3] xtables-compat: remove useless functions
|
- - - |
0 0 0 |
2016-08-21 |
Pablo M. Bermudo Garay |
pablo |
Accepted |
|
[nf] netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT
|
- - - |
0 0 0 |
2016-08-21 |
Liping Zhang |
pablo |
Accepted |
|
[-next] netfilter: nft_hash: fix non static symbol warning
|
- - - |
0 0 0 |
2016-08-21 |
Wei Yongjun |
pablo |
Accepted |
|
[iptables] extensions: libxt_CLASSIFY: Add translation to nft
|
- - - |
0 0 0 |
2016-08-21 |
Liping Zhang |
pablo |
Accepted |
|
[6/6] netfilter: cttimeout: fix use after free error when delete netns
|
- - - |
0 0 0 |
2016-08-18 |
Pablo Neira |
pablo |
Accepted |
|
[5/6] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy
|
- - - |
0 0 0 |
2016-08-18 |
Pablo Neira |
pablo |
Accepted |
|
[4/6] netfilter: tproxy: properly refcount tcp listeners
|
- - - |
0 0 0 |
2016-08-18 |
Pablo Neira |
pablo |
Accepted |
|
[3/6] netfilter: nfnetlink_acct: report overquota to the right netns
|
- - - |
0 0 0 |
2016-08-18 |
Pablo Neira |
pablo |
Accepted |
|
[2/6] netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name
|
- - - |
0 0 0 |
2016-08-18 |
Pablo Neira |
pablo |
Accepted |
|
[1/6] netfilter: conntrack: do not dump other netns's conntrack entries via proc
|
- 1 - |
0 0 0 |
2016-08-18 |
Pablo Neira |
pablo |
Accepted |
|
[0/6] Netfilter fixes for net
|
- - - |
0 0 0 |
2016-08-18 |
Pablo Neira |
pablo |
Accepted |
|
netfilter: fix spelling mistake: "delimitter" -> "delimiter"
|
- - - |
0 0 0 |
2016-08-18 |
Colin King |
pablo |
Accepted |
|
[libnftnl] rule: Fix comparison between rules
|
- - - |
0 0 0 |
2016-08-18 |
Carlos Falgueras García |
pablo |
Accepted |
|
[nf-next] netfilter: nf_conntrack: restore nf_conntrack_htable_size as exported symbol
|
- - - |
0 0 0 |
2016-08-18 |
Pablo Neira |
pablo |
Accepted |
|
[nf] netfilter: cttimeout: fix use after free error when delete netns
|
- - - |
0 0 0 |
2016-08-18 |
Liping Zhang |
pablo |
Accepted |
|
[v5] netfilter: nft_numgen: add number generator expression
|
- - - |
0 0 0 |
2016-08-18 |
Laura Garcia Liebana |
pablo |
Accepted |
|
[nf-next] netfilter: nf_tables: add quota expression
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[net] netfilter: tproxy: properly refcount tcp listeners
|
- - - |
0 0 0 |
2016-08-17 |
Eric Dumazet |
pablo |
Accepted |
|
[iptables,1/2] xtables-translate: add escape_quotes option to comment_xlate
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,10/10] parser_bison: redirect to :port for consistency with nat/masq statement
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,09/10] src: meta priority support using tc classid
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,08/10] src: simplify classid printing using %x instead of %04x
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,07/10] src: rename datatype name from tc_handle to classid
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,06/10] scanner: remove range expression
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,05/10] scanner: allow strings starting by underscores and dots
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,04/10] parser_bison: missing token string in QUOTED_ASTERISK and ASTERISK_STRING
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,03/10] src: support for RFC2732 IPv6 address format with brackets
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,02/10] src: add 'to' for snat and dnat
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[nft,01/10] src: quote user-defined strings when used from rule selectors
|
- - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[2/2,nft] ct: release ct_label table on exit
|
1 - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[1/2,nft] ct: add missing slash to connlabel path
|
1 - - |
0 0 0 |
2016-08-17 |
Pablo Neira |
pablo |
Accepted |
|
[1/3,v5,libnftnl] Implement rule comparison
|
- - - |
0 0 0 |
2016-08-17 |
Carlos Falgueras García |
pablo |
Accepted |
|
[iptables,1/2] xtables-translate: add escape_quotes option to comment_xlate
|
- - - |
0 0 0 |
2016-08-16 |
Pablo M. Bermudo Garay |
pablo |
Accepted |
|
[nf] netfilter: conntrack: do not dump other netns's conntrack entries via proc
|
- 1 - |
0 0 0 |
2016-08-15 |
Liping Zhang |
pablo |
Accepted |
|
[2/2,libnfntl] expr: cmp: Use cmp2str() instead of directly access to array
|
- - - |
0 0 0 |
2016-08-15 |
Carlos Falgueras García |
pablo |
Accepted |
|
[1/2,libnftnl] utils: Fix out of bound access in nftnl_family2str
|
- - - |
0 0 0 |
2016-08-15 |
Carlos Falgueras García |
pablo |
Accepted |
|
[libnetfilter_conntrack] src: Make the library compile under clang
|
- - - |
0 0 0 |
2016-08-14 |
Kevin Cernekee |
pablo |
Accepted |
|
[v2,libnftnl] expr: add number generation expression
|
- - - |
0 0 0 |
2016-08-14 |
Laura Garcia Liebana |
pablo |
Accepted |
|
[nf,2/2] netfilter: nfnetlink_acct: report overquota to the right netns
|
- - - |
0 0 0 |
2016-08-13 |
Liping Zhang |
pablo |
Accepted |
|
[nf,1/2] netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy
|
- - - |
0 0 0 |
2016-08-13 |
Liping Zhang |
pablo |
Accepted |
|
[nf-next] netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name
|
- - - |
0 0 0 |
2016-08-13 |
Liping Zhang |
pablo |
Accepted |
|
[V3,nf-next] netfilter: conntrack: simplify the code by using nf_conntrack_get_ht
|
- - - |
0 0 0 |
2016-08-13 |
Liping Zhang |
pablo |
Accepted |
|
[nf-next,v2] netfilter: remove ip_conntrack* sysctl compat code
|
- - - |
0 0 0 |
2016-08-13 |
Pablo Neira |
pablo |
Accepted |
|
[v2,libnftnl] expr: add hash expression
|
- - - |
0 0 0 |
2016-08-12 |
Laura Garcia Liebana |
pablo |
Accepted |
|
[2/4,V2,libnftnl] tests: Fix wrong expression creation
|
- - - |
0 0 0 |
2016-08-12 |
Carlos Falgueras García |
pablo |
Accepted |
|
[libnftnl] utils: Don't return directly from SNPRINTF_BUFFER_SIZE
|
- - - |
0 0 0 |
2016-08-12 |
Phil Sutter |
pablo |
Accepted |
|
[libnftnl,7/7] ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set()
|
- - - |
0 0 0 |
2016-08-11 |
Phil Sutter |
pablo |
Accepted |
|
[libnftnl,6/7] Avoid returning uninitialized data
|
- - - |
0 0 0 |
2016-08-11 |
Phil Sutter |
pablo |
Accepted |
|
[libnftnl,4/7] expr/limit: Drop unreachable code in limit_to_type()
|
- - - |
0 0 0 |
2016-08-11 |
Phil Sutter |
pablo |
Accepted |
|
[libnftnl,3/7] expr/ct: prevent array index overrun in ctkey2str()
|
- - - |
0 0 0 |
2016-08-11 |
Phil Sutter |
pablo |
Accepted |
|
[libnftnl,1/7] set: prevent memleak in nftnl_jansson_parse_set_info()
|
- - - |
0 0 0 |
2016-08-11 |
Phil Sutter |
pablo |
Accepted |
|
[v5] netfilter: nf_tables: add hash expression
|
- - - |
0 0 0 |
2016-08-11 |
Laura Garcia Liebana |
pablo |
Accepted |
|
[netfilter] extensions/libxt_bpf.man: clarify BPF code generation with tcpdump
|
- - - |
0 0 0 |
2016-08-10 |
Willem de Bruijn |
pablo |
Accepted |
|
[9/9] netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributes
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[8/9] netfilter: ctnetlink: reject new conntrack request with different l4proto
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[7/9] netfilter: nfnetlink_queue: reject verdict request from different portid
|
- 1 - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[6/9] netfilter: nfnetlink_queue: fix memory leak when attach expectation successfully
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[5/9] netfilter: nf_ct_expect: remove the redundant slash when policy name is empty
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[4/9] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[3/9] netfilter: nft_rbtree: ignore inactive matching element with no descendants
|
- - 1 |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[2/9] netfilter: nf_tables: s/MFT_REG32_01/NFT_REG32_01
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[1/9] netfilter: nf_ct_h323: do not re-activate already expired timer
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[0/9] Netfilter fixes for net
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[nft] tests: tests to include files
|
- - - |
0 0 0 |
2016-08-10 |
Pablo Neira |
pablo |
Accepted |
|
[3/3,libnftnl] tests: Fix tests for immediate and lookup expressions
|
- - - |
0 0 0 |
2016-08-10 |
Carlos Falgueras García |
pablo |
Accepted |
|
[2/3,libnftnl] expr: Fix lookup builder
|
- - - |
0 0 0 |
2016-08-10 |
Carlos Falgueras García |
pablo |
Accepted |
|
[1/3,libnftnl] tests: Add missing tests to test-script.sh
|
- - - |
0 0 0 |
2016-08-10 |
Carlos Falgueras García |
pablo |
Accepted |
|
[1/4,V3,libnftnl] rule: Implement internal expression iterator
|
- - - |
0 0 0 |
2016-08-10 |
Carlos Falgueras García |
pablo |
Accepted |
|
netfilter: nf_tables: Add size check on u8 nft_exthdr attributes
|
- - - |
0 0 0 |
2016-08-09 |
Laura Garcia Liebana |
pablo |
Accepted |
|
netfilter: nf_tables: rename set implementations
|
- - - |
0 0 0 |
2016-08-09 |
Pablo Neira |
pablo |
Accepted |
|
[v2] Constify iterators
|
- - - |
0 0 0 |
2016-08-09 |
Carlos Falgueras García |
pablo |
Accepted |
|
[nft,3/3] scanner: don't break line on include error message
|
- - - |
0 0 0 |
2016-08-09 |
Pablo Neira |
pablo |
Accepted |
|
[nft,2/3] scanner: don't fall back on current directory if include is not found
|
- - - |
0 0 0 |
2016-08-09 |
Pablo Neira |
pablo |
Accepted |
|
[nft,1/3] scanner: honor absolute and relative paths via include file
|
- - - |
0 0 0 |
2016-08-09 |
Pablo Neira |
pablo |
Accepted |
|
[nf] netfilter: ctnetlink: reject new conntrack request with different l4proto
|
- - - |
0 0 0 |
2016-08-08 |
Liping Zhang |
pablo |
Accepted |
|
[nf] netfilter: nfnetlink_queue: reject verdict request from different portid
|
- 1 - |
0 0 0 |
2016-08-08 |
Liping Zhang |
pablo |
Accepted |
|
[nf] netfilter: nfnetlink_queue: fix memory leak when attach expectation successfully
|
- - - |
0 0 0 |
2016-08-08 |
Liping Zhang |
pablo |
Accepted |
|
[nf] netfilter: nf_expect_proc: remove the redundant slash when policy name is empty
|
- - - |
0 0 0 |
2016-08-08 |
Liping Zhang |
pablo |
Accepted |
|
[nf-next,v2] ipvs: use nf_ct_kill helper
|
1 - - |
0 0 0 |
2016-08-03 |
Florian Westphal |
pablo |
Accepted |
|
[v2] netfilter: nf_conntrack_sip: CSeq 0 is a valid CSeq
|
- - - |
0 0 0 |
2016-08-03 |
Christophe Leroy |
pablo |
Accepted |
|
[nf-next] netfilter: use_nf_conn_expires helper in more places
|
- - - |
0 0 0 |
2016-08-03 |
Florian Westphal |
pablo |
Accepted |
|
[iptables] xtables-compat: fix comments listing
|
- - - |
0 0 0 |
2016-08-02 |
Pablo M. Bermudo Garay |
pablo |
Accepted |
|
[nf-next] netfilter: nf_dup4: remove redundant checksum recalculation
|
- - - |
0 0 0 |
2016-07-30 |
Liping Zhang |
pablo |
Accepted |
|
[iptables] iptables-translate: add in/out ifname wildcard match translation to nft
|
- - - |
0 0 0 |
2016-07-30 |
Liping Zhang |
pablo |
Accepted |
|
[nft] parser_bison: keep map flag around when flags are specified
|
- - - |
0 0 0 |
2016-07-27 |
Pablo Neira |
pablo |
Accepted |
|
[iptables,v2,2/2] xtables-translate: fix issue with quotes
|
- - - |
0 0 0 |
2016-07-26 |
Pablo M. Bermudo Garay |
pablo |
Accepted |
|
[iptables,1/2] include: xtables: fix struct definitions grepability
|
- - - |
0 0 0 |
2016-07-26 |
Pablo M. Bermudo Garay |
pablo |
Accepted |
|
manpages: do not adjust reject-with type footnote indentation
|
- - - |
0 0 0 |
2016-07-26 |
Sami Kerola |
pablo |
Accepted |
|
[nf-next] netfilter: physdev: add missed blank
|
- - - |
0 0 0 |
2016-07-25 |
Hangbin Liu |
pablo |
Accepted |
|
netfilter: nf_tables: s/MFT_REG32_01/NFT_REG32_01
|
- - - |
0 0 0 |
2016-07-24 |
Pablo Neira |
pablo |
Accepted |
|
[nft] xt: use struct xt_xlate_{mt,tg}_params
|
- - - |
0 0 0 |
2016-07-24 |
Pablo Neira |
pablo |
Accepted |