1. ac1cd6c netfilter: ipv6: nf_defrag: accept duplicate fragments again by Guillaume Nault · 5 years ago
  2. 87a3cb0 netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments by Guillaume Nault · 5 years ago
  3. d476186 net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c by Peter Oskolkov · 5 years ago
  4. 33336cd ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module by Florian Westphal · 5 years ago
  5. 1894d7c netfilter: nf_tables: fix mismatch in big-endian system by Liping Zhang · 7 years ago
  6. 2edec22 Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing" by Sasha Levin · 6 years ago
  7. 85e59af9 ip: frags: fix crash in ip_do_fragment() by Taehee Yoo · 6 years ago
  8. 1004395 ip: use rb trees for IP frag queue. by Peter Oskolkov · 6 years ago
  9. a8444b1 ipv6: defrag: drop non-last frags smaller than min mtu by Florian Westphal · 6 years ago
  10. d838486 inet: frags: fix ip6frag_low_thresh boundary by Eric Dumazet · 6 years ago
  11. 7f61706 inet: frags: break the 2GB limit for frags storage by Eric Dumazet · 6 years ago
  12. 965e2ad inet: frags: remove inet_frag_maybe_warn_overflow() by Eric Dumazet · 6 years ago
  13. 23ce9c5 inet: frags: use rhashtables for reassembly units by Eric Dumazet · 6 years ago
  14. 2ffb1c3 inet: frags: add a pointer to struct netns_frags by Eric Dumazet · 6 years ago
  15. 7fca771 inet: frags: change inet_frags_init_net() return value by Eric Dumazet · 6 years ago
  16. 894b753 netfilter: x_tables: set module owner for icmp(6) matches by Florian Westphal · 6 years ago
  17. a677cc3 netfilter: ipv6: nf_defrag: reduce struct net memory waste by Eric Dumazet · 6 years ago
  18. ad8b1ff netfilter: ipv6: nf_defrag: drop skb dst before queueing by Florian Westphal · 6 years ago
  19. 40352e7 netfilter: x_tables: initialise match/target check parameter struct by Florian Westphal · 6 years ago
  20. dd5968e netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure by Subash Abhinov Kasiviswanathan · 7 years ago
  21. d65bc95 netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460 by Subash Abhinov Kasiviswanathan · 7 years ago
  22. db6a0cb netfilter: x_tables: pack percpu counter allocations by Florian Westphal · 8 years ago
  23. dac4448 netfilter: x_tables: pass xt_counters struct to counter allocator by Florian Westphal · 8 years ago
  24. 61346e2 netfilter: x_tables: pass xt_counters struct instead of packet counter by Florian Westphal · 8 years ago
  25. 60962e9 netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt by Florian Westphal · 6 years ago
  26. f506da5 netfilter: add back stackpointer size checks by Florian Westphal · 6 years ago
  27. 4ec264d netfilter: on sockopt() acquire sock lock only in the required scope by Paolo Abeni · 7 years ago
  28. 1bcf187 Revert "net: fix percpu memory leaks" by Jesper Dangaard Brouer · 7 years ago
  29. 9acfb31 netfilter: use fwmark_reflect in nf_send_reset by Pau Espin Pedrol · 8 years ago
  30. 0bcc319 ipv6: orphan skbs in reassembly unit by Eric Dumazet · 7 years ago
  31. 9b57da0 netfilter: ipv6: nf_defrag: drop mangled skb on ream error by Florian Westphal · 8 years ago
  32. 00b4422 netfilter: Update nf_send_reset6 to consider L3 domain by David Ahern · 8 years ago
  33. b73b8a1 netfilter: nft_dup: do not use sreg_dev if the user doesn't specify it by Liping Zhang · 8 years ago
  34. f20fbc0 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Pablo Neira Ayuso · 8 years ago
  35. 8cb2a7d netfilter: nf_log: get rid of XT_LOG_* macros by Liping Zhang · 8 years ago
  36. ff107d2 netfilter: nft_log: complete NFTA_LOG_FLAGS attr support by Liping Zhang · 8 years ago
  37. e2361cb netfilter: Remove explicit rcu_read_lock in nf_hook_slow by Aaron Conole · 8 years ago
  38. d6989d4 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 8 years ago
  39. b20b378 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 8 years ago
  40. 23d0750 netfilter: Add the missed return value check of nft_register_chain_type by Gao Feng · 8 years ago
  41. 71212c9 netfilter: nf_tables: don't drop IPv6 packets that cannot parse transport by Pablo Neira Ayuso · 8 years ago
  42. d1a6cba netfilter: nft_chain_route: re-route before skb is queued to userspace by Liping Zhang · 8 years ago
  43. 779994f netfilter: log: Check param to avoid overflow in nf_log_set by Gao Feng · 8 years ago
  44. 89e1f6d netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT by Liping Zhang · 8 years ago
  45. f4dc777 netfilter: x_tables: speed up jump target validation by Florian Westphal · 8 years ago
  46. ae3e456 Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next by David S. Miller · 8 years ago
  47. c37a2df netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF by Joe Perches · 8 years ago
  48. 468b021 netfilter: x_tables: simplify ip{6}table_mangle_hook() by Pablo Neira Ayuso · 8 years ago
  49. fc14963 Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf by David S. Miller · 8 years ago
  50. 83170f3 netfilter: nf_dup_ipv6: set again FLOWI_FLAG_KNOWN_NH at flowi6_flags by Paolo Abeni · 8 years ago
  51. d7cdf81 netfilter: x_tables: get rid of old and inconsistent debugging by Pablo Neira Ayuso · 8 years ago
  52. 92b4423 netfilter: fix IS_ERR_VALUE usage by Pablo Neira Ayuso · 8 years ago
  53. d2b484b netfilter: ip6t_SYNPROXY: unnecessary to check whether ip6_route_output returns NULL by Liping Zhang · 8 years ago
  54. d7591f0 netfilter: x_tables: introduce and use xt_copy_counters_from_user by Florian Westphal · 8 years ago
  55. aded9f3 netfilter: x_tables: remove obsolete check by Florian Westphal · 8 years ago
  56. 9560915 netfilter: x_tables: remove obsolete overflow check for compat case too by Florian Westphal · 8 years ago
  57. 09d9686 netfilter: x_tables: do compat validation via translate_table by Florian Westphal · 8 years ago
  58. 0188346 netfilter: x_tables: xt_compat_match_from_user doesn't need a retval by Florian Westphal · 8 years ago
  59. 329a080 netfilter: ip6_tables: simplify translate_compat_table args by Florian Westphal · 8 years ago
  60. ce683e5 netfilter: x_tables: check for bogus target offset by Florian Westphal · 8 years ago
  61. fc1221b netfilter: x_tables: add compat version of xt_check_entry_offsets by Florian Westphal · 8 years ago
  62. aa412ba netfilter: x_tables: kill check_entry helper by Florian Westphal · 8 years ago
  63. 7d35812 netfilter: x_tables: add and use xt_check_entry_offsets by Florian Westphal · 8 years ago
  64. 3647234 netfilter: x_tables: validate targets of jumps by Florian Westphal · 8 years ago
  65. f24e230 netfilter: x_tables: don't move to non-existent next rule by Florian Westphal · 8 years ago
  66. da0caad Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next by David S. Miller · 8 years ago
  67. 85f1e7c netfilter: ipv6: unnecessary to check whether ip6_route_output() returns NULL by Haishuang Yan · 8 years ago
  68. 8fef24c netfilter: ip6t_SYNPROXY: remove magic number for hop_limit by Liping Zhang · 8 years ago
  69. b301f25 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES by Pablo Neira Ayuso · 8 years ago
  70. 54d83fc netfilter: x_tables: fix unconditional helper by Florian Westphal · 8 years ago
  71. 6e94e0c netfilter: x_tables: make sure e->next_offset covers remaining blob size by Florian Westphal · 8 years ago
  72. bdf533d netfilter: x_tables: validate e->target_offset early by Florian Westphal · 8 years ago
  73. 2646190 netfilter: Allow calling into nat helper without skb_dst. by Jarno Rajahalme · 8 years ago
  74. 8a6bf5d netfilter: nft_masq: support port range by Pablo Neira Ayuso · 8 years ago
  75. b9e69e1 netfilter: xtables: don't hook tables by default by Florian Westphal · 8 years ago
  76. a67dd26 netfilter: xtables: prepare for on-demand hook register by Florian Westphal · 8 years ago
  77. d93c625 netfilter: conntrack: resched in nf_ct_iterate_cleanup by Florian Westphal · 9 years ago
  78. df05ef8 netfilter: nf_tables: release objects on netns destruction by Pablo Neira Ayuso · 9 years ago
  79. 59ce967 Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next by David S. Miller · 9 years ago
  80. b3e0d3d Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 9 years ago
  81. c8cd098 net: Eliminate NETIF_F_GEN_CSUM and NETIF_F_V[46]_CSUM by Tom Herbert · 9 years ago
  82. a4ec800 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Pablo Neira Ayuso · 9 years ago
  83. 9e5be5b Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf by David S. Miller · 9 years ago
  84. d3340b7 netfilter: nf_dup: add missing dependencies with NF_CONNTRACK by Pablo Neira Ayuso · 9 years ago
  85. e97ac12 netfilter: ipv6: nf_defrag: fix NULL deref panic by Florian Westphal · 9 years ago
  86. 264640f ipv6: distinguish frag queues by device for multicast and link-local packets by Michal Kubeček · 9 years ago
  87. daaa7d6 netfilter: ipv6: avoid nf_iterate recursion by Florian Westphal · 9 years ago
  88. 029f7f3 netfilter: ipv6: nf_defrag: avoid/free clone operations by Florian Westphal · 9 years ago
  89. a18fd97 netfilter: remove duplicate include by stephen hemminger · 9 years ago
  90. 1d6119b net: fix percpu memory leaks by Eric Dumazet · 9 years ago
  91. b75ec3a Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 9 years ago
  92. 190b8ff ipv6: Export nf_ct_frag6_consume_orig() by Joe Stringer · 9 years ago
  93. ba3e208 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 9 years ago
  94. f0a0a97 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Pablo Neira Ayuso · 9 years ago
  95. 2ffbceb netfilter: remove hook owner refcounting by Florian Westphal · 9 years ago
  96. dbb526e netfilter: ipv6: pointer cast layout by Ian Morris · 9 years ago
  97. 4305ae4 netfilter: ip6_tables: improve if statements by Ian Morris · 9 years ago
  98. 544d9b1 netfilter: ip6_tables: ternary operator layout by Ian Morris · 9 years ago
  99. f9527ea netfilter: ipv6: whitespace around operators by Ian Morris · 9 years ago
  100. 7695495 netfilter: ipv6: code indentation by Ian Morris · 9 years ago