Skip to content

: Netfilter fixes

Patrick McHardy netfilter-devel 1 version Applied

Status from this message: Applied.

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest5 patches 5 repliesApplied

Patches in v1 Applied

#Subject and filesSizeRepliesApplied
1/5: compat offsets size changenet/ipv4/netfilter/ip_tables.c+5 -51 reply
2/5: Fix routing of REJECT target generated packets in output chainnet/ipv4/netfilter.c+5 -21 reply
3/5: New connection tracking is not EXPERIMENTAL anymorenet/ipv4/netfilter/Kconfig net/netfilter/Kconfig+14 -151 reply
4/5: nf_nat: fix MASQUERADE crash on device downnet/ipv4/netfilter/ipt_MASQUERADE.c+4 -11 reply
5/5: ebtables: don't compute gap before checking struct typenet/bridge/netfilter/ebtables.c+2 -11 reply

Reviews trailers per patch

1 of 5 patches has a Reviewed-by or Acked-by.

PatchSantiago Garcia MantinanAl Viro
1/5
2/5
3/5
4/5
5/5T-b A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [NETFILTER 00/05]: Netfilter fixes

Hi Dave,

following are a few important netfilter fixes for 2.6.20, fixing a REJECT target regression in 2.6.19, a nf_nat crash and an ebtables crash. Also included are two patches to use the correct type for iptables compat offsets and remove the EXPERIMENTAL mark from nf_conntrack.

Please apply, thanks.

 net/bridge/netfilter/ebtables.c     |    3 ++-
 net/ipv4/netfilter.c                |    7 +++++--
 net/ipv4/netfilter/Kconfig          |    4 ++--
 net/ipv4/netfilter/ip_tables.c      |   10 +++++-----
 net/ipv4/netfilter/ipt_MASQUERADE.c |    5 ++++-
 net/netfilter/Kconfig               |   25 ++++++++++++-------------
 6 files changed, 30 insertions(+), 24 deletions(-)

Chuck Ebbert:
[NETFILTER]: ebtables: don't compute gap before checking struct type

Dmitry Mishin:
[NETFILTER]: compat offsets size change

Martin Josefsson:
[NETFILTER]: nf_nat: fix MASQUERADE crash on device down

Patrick McHardy:
[NETFILTER]: Fix routing of REJECT target generated packets in output chain [NETFILTER]: New connection tracking is not EXPERIMENTAL anymore