| iptables: missing free() in function cache_add_entry() |
2012-03-08 |
Christian Engelmayer |
|
Accepted |
| netfilter: ipt_LOG: add __printf() to sb_add() |
2012-03-01 |
Eric Dumazet |
|
Accepted |
| [23/23] netfilter: xt_LOG: add __printf() to sb_add() |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [22/23] netfilter: xt_CT: allow to attach timeout policy + glue code |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [21/23] netfilter: nf_ct_ext: add timeout extension |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [20/23] netfilter: add cttimeout infrastructure for fine timeout tuning |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [19/23] netfilter: nf_conntrack: pass timeout array to l4->new and l4->packet |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [18/23] netfilter: nf_ct_gre: add unsigned int array to define timeouts |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [17/23] netfilter: nf_ct_tcp: move retransmission and unacknowledged timeout to array |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [16/23] netfilter: nf_ct_udp[lite]: convert UDP[lite] timeouts to array |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [15/23] netfilter: ctnetlink: fix lockep splats |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [14/23] netfilter: xt_LOG: fix bogus extra layer-4 logging information |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [13/23] netfilter: remove ipt_SAME.h and ipt_realm.h |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [12/23] netfilter: nf_ct_ecache: refactor nf_ct_deliver_cached_events |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [11/23] netfilter: nf_ct_ecache: trailing whitespace removed |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [10/23] netfilter: merge ipt_LOG and ip6_LOG into xt_LOG |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [09/23] netfilter: ctnetlink: allow to set expectfn for expectations |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [08/23] netfilter: ctnetlink: add NAT support for expectations |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [07/23] netfilter: ctnetlink: allow to set expectation class |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [06/23] netfilter: ctnetlink: allow to set helper for new expectations |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [05/23] netfilter: ipset: hash:net,iface timeout bug fixed |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [04/23] netfilter: ipset: Exceptions support added to hash:*net* types |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [03/23] netfilter: ipset: Log warning when a hash type of set gets full |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [02/23] netfilter: ipset: expose userspace-relevant parts in ip_set.h |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [01/23] netfilter: ipset: use NFPROTO_ constants |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [1/4] Netfilter: Merge ipt_LOG and ip6_LOG into xt_LOG |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [5/7] netfilter: add cttimeout infrastructure for fine timeout tuning |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [7/7] netfilter: xt_CT: allow to attach timeout policy + glue code |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [6/7] netfilter: nf_ct_ext: add timeout extension |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [4/7] netfilter: nf_conntrack: pass timeout array to l4->new and l4->packet |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [3/7] netfilter: nf_ct_gre: add unsigned int array to define timeouts |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [2/7] netfilter: nf_ct_tcp: move retransmission and unacknowledged timeout to array |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [1/7] netfilter: nf_ct_udp[lite]: convert UDP[lite] timeouts to array |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [1/4] Netfilter: Merge ipt_LOG and ip6_LOG into xt_LOG |
2012-03-01 |
Richard Weinberger |
|
Accepted |
| netfilter: ctnetlink: remove incorrect spin_[un]lock_bh on NAT module autoload |
2012-03-03 |
Pablo Neira |
|
Accepted |
| [1/1] conntrack, suspicious RCU usage |
2012-03-05 |
Hans Schillstrom |
|
Accepted |
| [v2] bridge: netfilter: don't call iptables on vlan packets if sysctl is off |
2012-03-05 |
Florian Westphal |
|
Accepted |
| netfilter: bridge: fix module autoload in compat case |
2012-03-01 |
Pablo Neira |
|
Accepted |
| Resend [PATCH] netfilter: Fix copy_to_user too small size parametre. |
2012-03-01 |
santosh nayak |
|
Accepted |
| [2/3] netfilter: potential null derefence. |
2012-03-01 |
santosh nayak |
|
Accepted |
| [6/6] Add extern "C" guard for C++ compilation mode |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [5/6] const-ify arguments of functions |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [4/6] Properly NUL-terminate name in nfct_timeout_attr_set |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [3/6] Add stdint header and type corrections |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [2/6] const-ify static data objects |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [1/6] Add .gitignore |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| libnetfilter_cttimeout: misc cleanup |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [1/4] Revert: add new libnetfilter_queue API for libmnl |
2013-04-26 |
Florian Westphal |
|
Rejected |
| Formal submission of Xtables2 |
2012-12-13 |
Jan Engelhardt |
|
Rejected |
| [V2,3/3] Remove VLAIS usage from netfilter |
2012-10-30 |
Behan Webster |
|
Rejected |
| [V2,2/3] Remove VLAIS usage from gadget code |
2012-10-30 |
Behan Webster |
|
Rejected |
| [V2,1/3] Helper macros used for replacing the use of VLAIS |
2012-10-30 |
Behan Webster |
|
Rejected |
| [2/2] Remove VLAIS usage from netfilter |
2012-10-30 |
Behan Webster |
|
Rejected |
| [1/2] Helper macros used for replacing the use of VLAIS |
2012-10-30 |
Behan Webster |
|
Rejected |
| nfnetlink: add a new subsystem to advertise tables update |
2012-09-24 |
Nicolas Dichtel |
|
Rejected |
| [RFC,1/1] xtables: allow to monitor table update event |
2012-10-02 |
Nicolas Dichtel |
|
Rejected |
| Increasing XT_EXTENSION_MAXNAMELEN to 32 |
2012-09-29 |
Amerigo Wang |
|
Rejected |
| [v2,1/6] netfilter: sanity checks on NFPROTO_NUMPROTO |
2012-05-14 |
Alban Crequy |
|
Rejected |
| [1/6] netfilter: sanity checks on NFPROTO_NUMPROTO |
2012-05-14 |
Alban Crequy |
|
Rejected |
| [RFC] netfilter: don't assume NFPROTO_* are like PF_* |
2012-05-14 |
Alban Crequy |
|
Rejected |
| iptables-save: fix don't show counters by default |
2012-05-10 |
Nicolas CARRIER |
|
Rejected |
| iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7) |
2012-07-23 |
Pablo Neira |
|
Rejected |
| [2/2] netfilter: nf_ct_expect: fix possible invalid dereference while event reporting |
2012-08-09 |
Pablo Neira |
|
Rejected |
| [1/2] netfilter: nf_ct_expect: fix re-insertion in expect list if timer refresh fails |
2012-08-09 |
Pablo Neira |
|
Rejected |
| [RFC,2/2] netfilter: conntrack: replace mutex with cmpxchg |
2012-04-27 |
Benjamin Poirier |
|
Rejected |
| [RFC,1/2] netfilter: conntrack: remove RCU usage in conntrack notifier |
2012-04-27 |
Benjamin Poirier |
|
Rejected |
| [2/2] netfilter: ipvs: use GFP_KERNEL allocation where possible |
2012-04-23 |
Simon Horman |
|
Rejected |
| [1/2] netfilter: ipvs: Verify that IP_VS protocol has been registered |
2012-04-23 |
Simon Horman |
|
Rejected |
| [GIT,PULL,net] IPVS |
2012-04-23 |
Simon Horman |
|
Rejected |
| [12/12] netfilter: export necessary function for generic proto |
2012-04-17 |
Gao feng |
|
Rejected |
| [11/12] netfilter: udplite proto sysctl support for net |
2012-04-17 |
Gao feng |
|
Rejected |
| [10/12] netfilter: sctp proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [09/12] netfilter: ipv6 sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [08/12] netfilter: ipv4 sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [07/12] netfilter: icmpv6 proto sysctl support for net |
2012-04-17 |
Gao feng |
|
Rejected |
| [06/12] netfilter: icmp proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [05/12] netfilter: udp proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [04/12] netfilter: tcp proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [03/12] netfilter: generic proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [02/12] netfilter: don't register sysctl when register proto |
2012-04-17 |
Gao feng |
|
Rejected |
| [01/12] netfilter: add struct netns_ct_proto to support netfilter namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [5/9] ipvs: use adaptive pause in master thread |
2012-04-11 |
Julian Anastasov |
|
Rejected |
| patch in bugzilla |
2012-03-02 |
Jan Engelhardt |
|
Rejected |
| patch in bugzilla |
2012-03-01 |
Jonh Wendell |
|
Rejected |
| netfilter: check the length of the data before dereferencing it |
2012-04-01 |
Changli Gao |
|
Rejected |
| net: check the length of the data before dereferencing it |
2012-04-02 |
Changli Gao |
|
Rejected |
| [RFC] netfilter: bridge: change indev name to vlan if vlan tag present |
2012-03-26 |
Florian Westphal |
|
Rejected |
| `iptables -m tcp --syn` doesn't do what the man says |
2012-03-30 |
Artyom Gavrichenkov |
|
Rejected |
| netfilter: don't do window scaling for a picked up connection |
2012-04-01 |
Changli Gao |
|
Rejected |
| Re[2]: linux-next: Tree for Mar 9 (netfilter) |
2012-03-11 |
Hans Schillstrom |
|
Rejected |
| [6/6] Netfilter: xt_LOG: Add timestamp support |
2012-03-05 |
Richard Weinberger |
|
Rejected |
| [5/6] Netfilter: xt_LOG: Implement ring buffer support |
2012-03-05 |
Richard Weinberger |
|
Rejected |
| [4/6] xt_log: Make printk() in sb_close() optional |
2012-03-05 |
Richard Weinberger |
|
Rejected |
| [3/6] ring_buffer: Export for_each_buffer_cpu() |
2012-03-05 |
Richard Weinberger |
|
Rejected |
| [2/6] netfilter: xt_LOG: fix bogus extra layer-4 logging information |
2012-03-05 |
Richard Weinberger |
|
Rejected |
| [1/6] Netfilter: Merge ipt_LOG and ip6_LOG into xt_LOG |
2012-03-05 |
Richard Weinberger |
|
Rejected |
| [3/3] netfilter: Remove redundant code. |
2012-03-01 |
santosh nayak |
|
Rejected |
| [next] libnetfilter_conntrack: don't ignore ATTR_CONNLABELS |
2013-05-16 |
Afschin Hormozdiary |
|
RFC |
| [iptables-nftables,6/6] xtables: add suport for DNAT rule translation to nft extensions |
2013-05-14 |
Tomasz Bursztyka |
|
RFC |
| [iptables-nftables,5/6] xtables: add support for translating xtables matches into nft expressions |
2013-05-14 |
Tomasz Bursztyka |
|
RFC |