summaryrefslogtreecommitdiff
path: root/net/netfilter/xt_socket.c
AgeCommit message (Expand)Author
2021-04-26netfilter: disable defrag once its no longer neededFlorian Westphal
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner
2018-09-28netfilter: xt_socket: check sk before checking for netns.Flavio Leitner
2018-06-28netfilter: check if the socket netns is correct.Flavio Leitner
2018-06-03netfilter: Decrease code duplication regarding transparent socket optionMáté Eckl
2018-02-14netfilter: x_tables: use pr ratelimiting in all remaining spotsFlorian Westphal
2017-09-26netfilter: xt_socket: Restore mark from full sockets onlySubash Abhinov Kasiviswanathan
2017-04-24netfilter: xt_socket: Fix broken IPv6 handlingPeter Tirsek
2016-12-06netfilter: defrag: only register defrag functionality if neededFlorian Westphal
2016-11-03netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso
2016-11-01netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.cPablo Neira Ayuso
2016-04-04tcp/dccp: do not touch listener sk_refcnt under synfloodEric Dumazet
2016-02-11inet: refactor inet[6]_lookup functions to take skbCraig Gallek
2015-09-18netfilter: x_tables: Use par->net instead of computing from the passed net de...Eric W. Biederman
2015-06-18netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flagHarout Hedeshian
2015-04-08netfilter: x_tables: don't extract flow keys on early demuxed sks in socket m...Daniel Borkmann
2015-03-17netfilter: xt_socket: prepare for TCP_NEW_SYN_RECV supportEric Dumazet
2015-02-16netfilter: xt_socket: fix a stack corruption bugEric Dumazet
2013-10-17netfilter: xt_socket: use sock_gen_put()Eric Dumazet
2013-10-09ipv6: make lookups simpler and fasterEric Dumazet
2013-08-20Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/...David S. Miller
2013-07-31netfilter: tproxy: remove nf_tproxy_core.hFlorian Westphal
2013-07-15netfilter: xt_socket: fix broken v0 supportEric Dumazet
2013-06-20netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flagEric Dumazet
2013-05-23netfilter: xt_socket: use IP early demuxEric Dumazet
2012-09-03netfilter: xt_socket: fix compilation warnings with gcc 4.7Pablo Neira Ayuso
2012-05-09netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()Hans Schillstrom
2011-12-16net:netfilter: use IS_ENABLEDIgor Maravić
2011-12-03ipv6: Add fragment reporting to ipv6_skip_exthdr().Jesse Gross
2011-06-06netfilter: add more values to enum ip_conntrack_infoEric Dumazet
2011-02-17netfilter: tproxy: do not assign timewait sockets to skb->skFlorian Westphal
2010-10-28netfilter: xt_socket: Make tproto signed in socket_mt6_v1().David S. Miller
2010-10-25netfilter: fix module dependency issues with IPv6 defragmentation, ip6tables ...KOVACS Krisztian
2010-10-21tproxy: added IPv6 support to the socket matchBalazs Scheidler
2010-10-21tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the...Balazs Scheidler
2010-06-08netfilter: nf_conntrack: IPS_UNTRACKED bitEric Dumazet
2010-05-11netfilter: xtables: deconstify struct xt_action_param for matchesJan Engelhardt
2010-05-11netfilter: xtables: substitute temporary defines by final nameJan Engelhardt
2010-03-25netfilter: xt extensions: use pr_<level> (2)Jan Engelhardt
2009-10-29netfilter: xt_socket: make module available for INPUT chainJan Engelhardt
2009-10-18inet: rename some inet_sock fieldsEric Dumazet
2009-06-09netfilter: xt_socket: added new revision of the 'socket' match supporting flagsLaszlo Attila Toth
2008-12-07tproxy: fixe a possible read from an invalid location in the socket matchBalazs Scheidler
2008-10-08netfilter: xtables: move extension arguments into compound structure (1/6)Jan Engelhardt
2008-10-08netfilter: iptables socket matchKOVACS Krisztian