Skip to content

: Netfilter update

Patrick McHardy netfilter-devel 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest6 patches 1 replyIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/6: bridge-nf: filter bridged IPv4/IPv6 encapsulated in pppoe trafficDocumentation/networking/ip-sysctl.txt include/linux/if_pppox.h include/linux/netfilter_bridge.h +2 more+92 -70 replies
2/6: ebt_arp: add gratuitous arp filteringinclude/linux/netfilter_bridge/ebt_arp.h net/bridge/netfilter/ebt_arp.c+25 -270 replies
3/6: nf_nat: use HW checksumming when possiblenet/ipv4/netfilter/nf_nat_helper.c+37 -120 replies
4/6: {eb, ip6, ip}t_LOG: remove remains of LOG target overloadingnet/bridge/netfilter/ebt_log.c net/ipv4/netfilter/ipt_LOG.c net/ipv6/netfilter/ip6t_LOG.c+12 -240 replies
5/6: nfnetlink_log: remove fallback to group 0net/netfilter/nfnetlink_log.c+0 -50 replies
6/6: ipt_ULOG: add compat conversion functionsnet/ipv4/netfilter/ipt_ULOG.c+40 -00 replies

Reviews trailers per patch

1 of 6 patches has a Reviewed-by or Acked-by.

PatchCarl-Daniel Hailfinger
1/6
2/6A-b
3/6
4/6
5/6
6/6

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [NETFILTER 00/06]: Netfilter update

Hi Dave,

following are a few netfilter patches for 2.6.22, adding support for filtering encapsulated PPPoE and gratuitous ARP packets in bridge netfilter, compat support for ipt_ULOG (as mentioned in the other thread, 32 bit userspace can already deal with log messages sent by a 64 bit kernel, but the kernel currently does not support adding new rules from a 32 bit iptables binary), some misc netfilter logging cleanup and support for using HW checksumming for forwarded packets mangled by NAT helpers.

Please apply, thanks.

 Documentation/networking/ip-sysctl.txt   |    7 ++
 include/linux/if_pppox.h                 |    3 +
 include/linux/netfilter_bridge.h         |   11 +++-
 include/linux/netfilter_bridge/ebt_arp.h |    4 +
 include/linux/sysctl.h                   |    1 
 net/bridge/br_netfilter.c                |   77 +++++++++++++++++++++++++++++--
 net/bridge/netfilter/ebt_arp.c           |   48 ++++++++-----------
 net/bridge/netfilter/ebt_log.c           |   12 +---
 net/ipv4/netfilter/ipt_LOG.c             |   12 +---
 net/ipv4/netfilter/ipt_ULOG.c            |   40 ++++++++++++++++
 net/ipv4/netfilter/nf_nat_helper.c       |   49 ++++++++++++++-----
 net/ipv6/netfilter/ip6t_LOG.c            |   12 +---
 net/netfilter/nfnetlink_log.c            |    5 --
 13 files changed, 206 insertions(+), 75 deletions(-)

Bart De Schuymer (1):
[NETFILTER]: ebt_arp: add gratuitous arp filtering

Michael Milner (1):
[NETFILTER]: bridge-nf: filter bridged IPv4/IPv6 encapsulated in pppoe traffic

Patrick McHardy (4):
[NETFILTER]: nf_nat: use HW checksumming when possible [NETFILTER]: {eb,ip6,ip}t_LOG: remove remains of LOG target overloading [NETFILTER]: nfnetlink_log: remove fallback to group 0 [NETFILTER]: ipt_ULOG: add compat conversion functions