Skip to content

: Netfilter -stable fixes

Patrick McHardy netfilter-devel 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest4 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/4: Fix routing of REJECT target generated packets in output chainnet/ipv4/netfilter.c+5 -20 replies
2/4: nf_conntrack_ipv6: fix crash when handling fragmentsnet/ipv6/netfilter/nf_conntrack_reasm.c+2 -00 replies
3/4: tcp conntrack: fix IP_CT_TCP_FLAG_CLOSE_INIT valueinclude/linux/netfilter/nf_conntrack_tcp.h+1 -10 replies
4/4: arp_tables: fix userspace compilationinclude/linux/netfilter_arp/arp_tables.h+1 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [NETFILTER 00/04]: Netfilter -stable fixes

Following are a few important netfilter patches for -stable, fixing

- a crash in nf_conntrack_ipv6 when handling fragments
- an incorrect numerical value for the TCP connection tracking IP_CT_TCP_FLAG_CLOSE_INIT flag, causing various kinds of misbehaviour
- a regression in 2.6.19 when routing REJECT packets in the OUTPUT chain
- userspace compilation of arp_tables

All patches are either already in Linus' tree or queued in Dave's net-2.6 tree. Please apply, thanks.

 include/linux/netfilter/nf_conntrack_tcp.h |    2 +-
 include/linux/netfilter_arp/arp_tables.h   |    1 +
 net/ipv4/netfilter.c                       |    7 +++++--
 net/ipv6/netfilter/nf_conntrack_reasm.c    |    2 ++
 4 files changed, 9 insertions(+), 3 deletions(-)

Bart De Schuymer:
[NETFILTER]: arp_tables: fix userspace compilation

Patrick McHardy:
[NETFILTER]: Fix routing of REJECT target generated packets in output chain [NETFILTER]: nf_conntrack_ipv6: fix crash when handling fragments [NETFILTER]: tcp conntrack: fix IP_CT_TCP_FLAG_CLOSE_INIT value