Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
David S. Miller e3a88f9c4f Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf ... Pablo Neira Ayuso says: ==================== netfilter/ipvs fixes for net The following patchset contains fixes for netfilter/ipvs. This round of fixes is larger than usual at this stage, specifically because of the nf_tables bridge reject fixes that I would like to see in 3.18. The patches are: 1) Fix a null-pointer dereference that may occur when logging errors. This problem was introduced by 4a4739d56b ("ipvs: Pull out crosses_local_route_boundary logic") in v3.17-rc5. 2) Update hook mask in nft_reject_bridge so we can also filter out packets from there. This fixes 36d2af5 ("netfilter: nf_tables: allow to filter from prerouting and postrouting"), which needs this chunk to work. 3) Two patches to refactor common code to forge the IPv4 and IPv6 reject packets from the bridge. These are required by the nf_tables reject bridge fix. 4) Fix nft_reject_bridge by avoiding the use of the IP stack to reject packets from the bridge. The idea is to forge the reject packets and inject them to the original port via br_deliver() which is now exported for that purpose. 5) Restrict nft_reject_bridge to bridge prerouting and input hooks. the original skbuff may cloned after prerouting when the bridge stack needs to flood it to several bridge ports, it is too late to reject the traffic. ==================== Signed-off-by: David S. Miller <davem@davemloft.net>		2014-10-31 12:29:42 -04:00
..
netfilter	netfilter: nf_reject_ipv4: split nf_send_reset() in smaller functions	2014-10-31 12:49:05 +01:00
af_inet.c	net: gso: use feature flag argument in all protocol gso handlers	2014-10-20 12:38:12 -04:00
ah4.c	ipsec: Remove obsolete MAX_AH_AUTH_LEN	2014-09-18 10:54:36 +02:00
arp.c	arp: Do not perturb drop profiles with ignored ARP packets	2014-09-28 17:30:35 -04:00
cipso_ipv4.c	cipso: add __init to cipso_v4_cache_init	2014-10-01 15:46:20 -04:00
datagram.c
devinet.c
esp4.c
fib_frontend.c
fib_lookup.h
fib_rules.c
fib_semantics.c	ipv4: fix nexthop attlen check in fib_nh_match	2014-10-14 15:59:37 -04:00
fib_trie.c
fou.c	ipv4: fix a potential use after free in fou.c	2014-10-17 23:45:26 -04:00
geneve.c	net: fix a sparse warning	2014-10-07 00:10:47 -04:00
gre_demux.c
gre_offload.c	gre: Use inner mac length when computing tunnel length	2014-10-30 19:51:56 -04:00
icmp.c	icmp: add a global rate limitation	2014-09-23 12:47:38 -04:00
igmp.c	ipv4: igmp: fix v3 general query drop monitor false positive	2014-10-06 17:14:54 -04:00
inet_connection_sock.c
inet_diag.c
inet_fragment.c	inet: frags: remove the WARN_ON from inet_evict_bucket	2014-10-29 15:21:30 -04:00
inet_hashtables.c
inet_lro.c
inet_timewait_sock.c
inetpeer.c
ip_forward.c
ip_fragment.c	inet: frags: add __init to ip4_frags_ctl_register	2014-10-01 15:46:19 -04:00
ip_gre.c	net: better IFF_XMIT_DST_RELEASE support	2014-10-07 13:22:11 -04:00
ip_input.c
ip_options.c	ipv4: rename ip_options_echo to __ip_options_echo()	2014-09-28 16:35:42 -04:00
ip_output.c	net: make skb_gso_segment error handling more robust	2014-10-20 12:38:13 -04:00
ip_sockglue.c
ip_tunnel.c	ip_tunnel: Add GUE support	2014-10-03 16:53:33 -07:00
ip_tunnel_core.c	ipv4: fix a potential use after free in ip_tunnel_core.c	2014-10-17 23:45:26 -04:00
ip_vti.c	net: better IFF_XMIT_DST_RELEASE support	2014-10-07 13:22:11 -04:00
ipcomp.c
ipconfig.c
ipip.c	net: better IFF_XMIT_DST_RELEASE support	2014-10-07 13:22:11 -04:00
ipmr.c
Kconfig	openvswitch: fix a compilation error when CONFIG_INET is not setW!	2014-10-07 00:10:49 -04:00
Makefile	net: Add Geneve tunneling protocol driver	2014-10-06 00:32:20 -04:00
netfilter.c
ping.c
proc.c
protocol.c	net: Export inet_offloads and inet6_offloads	2014-09-19 17:15:31 -04:00
raw.c
route.c	ipv4: Do not cache routing failures due to disabled forwarding.	2014-10-30 19:20:40 -04:00
syncookies.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-10-18 09:31:37 -07:00
sysctl_net_ipv4.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2014-10-08 21:40:54 -04:00
tcp.c	tcp: md5: do not use alloc_percpu()	2014-10-25 16:10:04 -04:00
tcp_bic.c
tcp_cong.c	tcp: Change tcp_slow_start function to return void	2014-09-30 17:09:16 -04:00
tcp_cubic.c
tcp_dctcp.c	net: tcp: add DCTCP congestion control algorithm	2014-09-29 00:13:10 -04:00
tcp_diag.c
tcp_fastopen.c	tcp: remove unnecessary assignment.	2014-09-29 12:31:12 -04:00
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c	tcp: fix tcp_ack() performance problem	2014-10-14 15:59:37 -04:00
tcp_ipv4.c	net: fix saving TX flow hash in sock for outgoing connections	2014-10-22 16:14:29 -04:00
tcp_lp.c
tcp_memcontrol.c
tcp_metrics.c
tcp_minisocks.c	tcp: change TCP_ECN prefixes to lower case	2014-09-29 14:41:22 -04:00
tcp_offload.c	net: Remove gso_send_check as an offload callback	2014-09-26 00:22:47 -04:00
tcp_output.c	net: skb_fclone_busy() needs to detect orphaned skb	2014-10-30 19:58:30 -04:00
tcp_probe.c
tcp_scalable.c
tcp_timer.c	tcp: abort orphan sockets stalling on zero window probes	2014-10-01 16:27:52 -04:00
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c	net: tcp: split ack slow/fast events from cwnd_event	2014-09-29 00:13:10 -04:00
tcp_yeah.c
tunnel4.c
udp.c
udp_diag.c
udp_impl.h
udp_offload.c	net: gso: use feature flag argument in all protocol gso handlers	2014-10-20 12:38:12 -04:00
udp_tunnel.c	udp-tunnel: Add a few more UDP tunnel APIs	2014-09-19 15:57:15 -04:00
udplite.c
xfrm4_input.c
xfrm4_mode_beet.c
xfrm4_mode_transport.c
xfrm4_mode_tunnel.c
xfrm4_output.c
xfrm4_policy.c
xfrm4_protocol.c
xfrm4_state.c
xfrm4_tunnel.c