1. 759fb7f netfilter: nf_tables: check msg_type before nft_trans_set(trans) by Alexey Kodanev · 6 years ago
  2. ac378e6 netfilter: nf_queue: augment nfqa_cfg_policy by Eric Dumazet · 6 years ago
  3. 1712fae netfilter: nf_log: don't hold nf_log_mutex during user access by Jann Horn · 6 years ago
  4. 440bf5a netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain() by Taehee Yoo · 6 years ago
  5. 0063faa ipvs: fix buffer overflow with sync daemon and service by Julian Anastasov · 6 years ago
  6. f32bb2a netfilter: nf_tables: can't fail after linking rule into active rule list by Florian Westphal · 6 years ago
  7. 83797a7 ipvs: fix rtnl_lock lockups caused by start_sync_thread by Julian Anastasov · 6 years ago
  8. f51c454 netfilter: conntrack: don't call iter for non-confirmed conntracks by Florian Westphal · 7 years ago
  9. 2171500 netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize by Liping Zhang · 7 years ago
  10. c6ab7c6 netfilter: x_tables: add and use xt_check_proc_name by Florian Westphal · 7 years ago
  11. 3e8f962 netfilter: ctnetlink: Make some parameters integer to avoid enum mismatch by Matthias Kaehlcke · 7 years ago
  12. c70c7be netfilter: x_tables: unlock on error in xt_find_table_lock() by Dan Carpenter · 7 years ago
  13. dfe9c1d ipvs: explicitly forbid ipv6 service/dest creation if ipv6 mod is disabled by Paolo Abeni · 7 years ago
  14. 7ad1c43 netfilter: nft_dynset: continue to next expr if _OP_ADD succeeded by Liping Zhang · 7 years ago
  15. 3a04271 netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink by Liping Zhang · 7 years ago
  16. 87cfd7f netfilter: xt_CT: fix refcnt leak on error path by Gao Feng · 7 years ago
  17. db6a0cb netfilter: x_tables: pack percpu counter allocations by Florian Westphal · 8 years ago
  18. dac4448 netfilter: x_tables: pass xt_counters struct to counter allocator by Florian Westphal · 8 years ago
  19. 61346e2 netfilter: x_tables: pass xt_counters struct instead of packet counter by Florian Westphal · 8 years ago
  20. 034ad9d netfilter: IDLETIMER: be syzkaller friendly by Eric Dumazet · 7 years ago
  21. 7d10575 netfilter: nat: cope with negative port range by Paolo Abeni · 7 years ago
  22. af4b424 netfilter: x_tables: fix missing timer initialization in xt_LED by Paolo Abeni · 7 years ago
  23. 8d5c422 netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert by Cong Wang · 7 years ago
  24. c6f3be7 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1() by Cong Wang · 7 years ago
  25. b39f3f3 netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target} by Eric Dumazet · 7 years ago
  26. 1099c70 netfilter: x_tables: fix int overflow in xt_alloc_table_info() by Dmitry Vyukov · 7 years ago
  27. 898eeca netfilter: xt_osf: Add missing permission checks by Kevin Cernekee · 7 years ago
  28. 2c3184e netfilter: nfnetlink_cthelper: Add missing permission checks by Kevin Cernekee · 7 years ago
  29. 0708a47 netfilter: nfnetlink_queue: fix secctx memory leak by Liping Zhang · 8 years ago
  30. 01060ac netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table by Liping Zhang · 8 years ago
  31. 0f0ac21 netfilter: nfnl_cthelper: Fix memory leak by Jeffy Chen · 8 years ago
  32. ec38fb4 netfilter: nfnl_cthelper: fix runtime expectation policy updates by Pablo Neira Ayuso · 8 years ago
  33. a463f9c netfilter: ipvs: Fix inappropriate output of procfs by KUWAZAWA Takuya · 7 years ago
  34. 0cab694 Fix handling of verdicts after NF_QUEUE by Debabrata Banerjee · 7 years ago
  35. 0117c75 netfilter: nf_tables: fix oob access by Florian Westphal · 8 years ago
  36. ea13fd4 netfilter: nft_queue: use raw_smp_processor_id() by Pablo Neira Ayuso · 8 years ago
  37. a23349b netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable" by Florian Westphal · 7 years ago
  38. 25db12f netfilter: nat: avoid use of nf_conn_nat extension by Florian Westphal · 8 years ago
  39. c5493c6 netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family by Liping Zhang · 8 years ago
  40. f107c6d netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value. by Jarno Rajahalme · 8 years ago
  41. cd402b8 netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max by Liping Zhang · 8 years ago
  42. 146561a netfilter: invoke synchronize_rcu after set the _hook_ to NULL by Liping Zhang · 8 years ago
  43. 4c7f54a net/netfilter/nf_conntrack_core: Fix net_conntrack_lock() by Manfred Spraul · 7 years ago
  44. 5f81b1f netfilter: nat: fix src map lookup by Florian Westphal · 7 years ago
  45. 5170d21 netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister by Liping Zhang · 8 years ago
  46. 445ea10 ipvs: SNAT packet replies only for NATed connections by Julian Anastasov · 7 years ago
  47. b89bd0c netfilter: synproxy: fix conntrackd interaction by Eric Leblond · 7 years ago
  48. ced7689 netfilter: xt_TCPMSS: add more sanity tests on tcph->doff by Eric Dumazet · 7 years ago
  49. c47538f netfilter: nft_log: restrict the log prefix length to 127 by Liping Zhang · 8 years ago
  50. fefdd79 netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCL by Pablo Neira Ayuso · 8 years ago
  51. d864e67 netfilter: nf_conntrack_sip: fix wrong memory initialisation by Christophe Leroy · 8 years ago
  52. 3eb235a netfilter: nft_set_rbtree: handle element re-addition after deletion by Pablo Neira Ayuso · 7 years ago
  53. 371d034 netfilter: conntrack: refine gc worker heuristics, redux by Florian Westphal · 8 years ago
  54. 5f7ff59 netfilter: conntrack: remove GC_MAX_EVICTS break by Florian Westphal · 8 years ago
  55. 8f9872b netfilter: nf_ct_helper: warn when not applying default helper assignment by Jiri Kosina · 8 years ago
  56. 49cdc4c netfilter: nft_range: add the missing NULL pointer check by Liping Zhang · 8 years ago
  57. d3e2a11 netfilter: nf_tables: fix inconsistent element expiration calculation by Anders K. Pedersen · 8 years ago
  58. 7223ecd netfilter: nat: switch to new rhlist interface by Florian Westphal · 8 years ago
  59. 728e87b netfilter: nat: fix cmp return value by Florian Westphal · 8 years ago
  60. abd66e9 netfilter: nft_hash: validate maximum value of u32 netlink hash attribute by Laura Garcia Liebana · 8 years ago
  61. 58c78e1 netfilter: nf_tables: fix oops when inserting an element into a verdict map by Liping Zhang · 8 years ago
  62. e0df8ca netfilter: conntrack: refine gc worker heuristics by Florian Westphal · 8 years ago
  63. 6114cc5 netfilter: conntrack: fix CT target for UNSPEC helpers by Florian Westphal · 8 years ago
  64. fb9c964 netfilter: connmark: ignore skbs with magic untracked conntrack objects by Florian Westphal · 8 years ago
  65. 8fbfef7 ipvs: use IPVS_CMD_ATTR_MAX for family.maxattr by WANG Cong · 8 years ago
  66. c17c3cd netfilter: nf_tables: destroy the set if fail to add transaction by Liping Zhang · 8 years ago
  67. 5747620 netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning by Arnd Bergmann · 8 years ago
  68. f1d505b netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_check by John W. Linville · 8 years ago
  69. 444f901 netfilter: nf_conntrack_sip: extend request line validation by Ulrich Weber · 8 years ago
  70. dab4506 netfilter: nf_tables: fix race when create new element in dynset by Liping Zhang · 8 years ago
  71. 61f9e29 netfilter: nf_tables: fix *leak* when expr clone fail by Liping Zhang · 8 years ago
  72. bb6a6e8 netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabled by Liping Zhang · 8 years ago
  73. 7034b56 netfilter: fix nf_queue handling by Pablo Neira Ayuso · 8 years ago
  74. 7bb6615 netfilter: conntrack: restart gc immediately if GC_MAX_EVICTS is reached by Nicolas Dichtel · 8 years ago
  75. 1ecc281 netfilter: x_tables: suppress kmemcheck warning by Florian Westphal · 8 years ago
  76. d2e4d59 netfilter: nf_tables: avoid uninitialized variable warning by Arnd Bergmann · 8 years ago
  77. ccca660 netfilter: nft_range: validate operation netlink attribute by Pablo Neira Ayuso · 8 years ago
  78. 21a9e0f netfilter: nft_exthdr: fix error handling in nft_exthdr_init() by Dan Carpenter · 8 years ago
  79. 09525a0 netfilter: nf_tables: underflow in nft_parse_u32_check() by Dan Carpenter · 8 years ago
  80. 5751e17 netfilter: nft_hash: add missing NFTA_HASH_OFFSET's nla_policy by Liping Zhang · 8 years ago
  81. f434ed0 netfilter: xt_ipcomp: add "ip[6]t_ipcomp" module alias name by Liping Zhang · 8 years ago
  82. 6d19375 netfilter: xt_NFLOG: fix unexpected truncated packet by Liping Zhang · 8 years ago
  83. a8b1e36 netfilter: nft_dynset: fix element timeout for HZ != 1000 by Anders K. Pedersen · 8 years ago
  84. 1b203c1 netfilter: xt_hashlimit: Add missing ULL suffixes for 64-bit constants by Geert Uytterhoeven · 8 years ago
  85. bd3769b netfilter: Fix slab corruption. by Linus Torvalds · 8 years ago
  86. 2fa46c1 netfilter: nft_limit: fix divided by zero panic by Liping Zhang · 8 years ago
  87. dbb5918 netfilter: fix namespace handling in nf_log_proc_dostring by Jann Horn · 8 years ago
  88. 1f827f5 netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division by Vishwanath Pai · 8 years ago
  89. 7816ec5 netfilter: accommodate different kconfig in nf_set_hooks_head by Aaron Conole · 8 years ago
  90. 5119e43 netfilter: Fix potential null pointer dereference by Aaron Conole · 8 years ago
  91. f20fbc0 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Pablo Neira Ayuso · 8 years ago
  92. 8cb2a7d netfilter: nf_log: get rid of XT_LOG_* macros by Liping Zhang · 8 years ago
  93. ff107d2 netfilter: nft_log: complete NFTA_LOG_FLAGS attr support by Liping Zhang · 8 years ago
  94. 0f3cd9b netfilter: nf_tables: add range expression by Pablo Neira Ayuso · 8 years ago
  95. 58e207e netfilter: evict stale entries when user reads /proc/net/nf_conntrack by Florian Westphal · 8 years ago
  96. 11d5f15 netfilter: xt_hashlimit: Create revision 2 to support higher pps rates by Vishwanath Pai · 8 years ago
  97. 0dc60a4 netfilter: xt_hashlimit: Prepare for revision 2 by Vishwanath Pai · 8 years ago
  98. 7bfdde7 netfilter: nft_ct: report error if mark and dir specified simultaneously by Liping Zhang · 8 years ago
  99. d767ff2 netfilter: nft_ct: unnecessary to require dir when use ct l3proto/protocol by Liping Zhang · 8 years ago
  100. 8d11350 netfilter: seqadj: Fix the wrong ack adjust for the RST packet without ack by Gao Feng · 8 years ago