Skip to content

: Netfilter patches

Patrick McHardy netfilter-devel 1 version Applied

Status from this message: Applied.

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest9 patches 10 repliesApplied

Patches in v1 Applied

#Subject and filesSizeRepliesApplied
1/9: Clean up table initializationinclude/linux/netfilter/x_tables.h include/linux/netfilter_arp/arp_tables.h include/linux/netfilter_ipv4/ip_tables.h +9 more+238 -5101 reply
2/9: nf_nat: remove unused argument of function allocating bindinginclude/net/netfilter/nf_nat_rule.h net/ipv4/netfilter/nf_nat_rule.c net/ipv4/netfilter/nf_nat_standalone.c+10 -251 reply
3/9: nf_conntrack: Removes duplicated declarationsinclude/net/netfilter/nf_conntrack.h+0 -71 reply
4/9: nf_conntrack: Removes unused destroy operation of l3protoinclude/net/netfilter/nf_conntrack_l3proto.h net/netfilter/nf_conntrack_core.c+0 -81 reply
5/9: ctnetlink: clear helper area and handle unchanged helpernet/netfilter/nf_conntrack_netlink.c+22 -181 reply
6/9: nf_nat: Clears helper private area when NATingnet/netfilter/nf_conntrack_core.c+7 -21 reply
7/9: iptable_{filter, mangle}: more descriptive "happy cracking" messagenet/ipv4/netfilter/iptable_filter.c net/ipv4/netfilter/iptable_mangle.c+4 -22 replies
8/9: iptable_raw: ignore short packets sent by SOCK_RAW socketsnet/ipv4/netfilter/iptable_raw.c+20 -11 reply
9/9: xt_conntrack: add compat supportnet/netfilter/xt_conntrack.c+54 -01 reply

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [NETFILTER 00/09]: Netfilter patches

Hi Dave,

following are a few netfilter patches, containing some cleanup of nf_conntrack, nf_nat and ip_tables, additionally there are two fixes to clear the private helper area when reassigning helpers and compat support for xt_conntrack.

Please apply, thanks.

 include/linux/netfilter/x_tables.h           |    8 +
 include/linux/netfilter_arp/arp_tables.h     |   41 +++++++
 include/linux/netfilter_ipv4/ip_tables.h     |   22 ++++
 include/linux/netfilter_ipv6/ip6_tables.h    |   22 ++++
 include/net/netfilter/nf_conntrack.h         |    7 -
 include/net/netfilter/nf_conntrack_l3proto.h |    3 
 include/net/netfilter/nf_nat_rule.h          |   11 --
 net/ipv4/netfilter/arptable_filter.c         |  140 ++++-----------------------
 net/ipv4/netfilter/iptable_filter.c          |   73 ++++----------
 net/ipv4/netfilter/iptable_mangle.c          |   99 +++++--------------
 net/ipv4/netfilter/iptable_raw.c             |   78 +++++----------
 net/ipv4/netfilter/nf_nat_rule.c             |   86 ++--------------
 net/ipv4/netfilter/nf_nat_standalone.c       |   11 --
 net/ipv6/netfilter/ip6table_filter.c         |   70 ++++---------
 net/ipv6/netfilter/ip6table_mangle.c         |   96 +++++-------------
 net/ipv6/netfilter/ip6table_raw.c            |   52 ----------
 net/netfilter/nf_conntrack_core.c            |   14 +-
 net/netfilter/nf_conntrack_netlink.c         |   40 ++++---
 net/netfilter/xt_conntrack.c                 |   54 ++++++++++
 19 files changed, 354 insertions(+), 573 deletions(-)

Patrick McHardy (4):
[NETFILTER]: Clean up table initialization
[NETFILTER]: iptable_{filter,mangle}: more descriptive "happy cracking" message [NETFILTER]: iptable_raw: ignore short packets sent by SOCK_RAW sockets [NETFILTER]: xt_conntrack: add compat support

Yasuyuki Kozakai (5):
[NETFILTER]: nf_nat: remove unused argument of function allocating binding [NETFILTER]: nf_conntrack: Removes duplicated declarations [NETFILTER]: nf_conntrack: Removes unused destroy operation of l3proto [NETFILTER]: ctnetlink: clear helper area and handle unchanged helper [NETFILTER]: nf_nat: Clears helper private area when NATing