Skip to content

: Netfilter Update

Patrick McHardy netfilter-devel 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest9 patches 1 replyIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/9: Fix multiple bugs in ipv6header match+0 -00 replies
2/9: introduce skb_header_pointer() to ipv6header match+0 -00 replies
3/9: Make eui64 match usuable in FORWARD chain+0 -00 replies
4/9: Handle nonlinear skbs in ip_queue/ip6_queuenet/ipv6/netfilter/ip6_queue.c+4 -10 replies
5/9: Move rx timestamp functions to net/core/dev.cinclude/net/sock.h net/core/dev.c net/core/sock.c+27 -170 replies
6/9: Enable rx timestamps in ip_queue/ip6_queuenet/ipv6/netfilter/ip6_queue.c+4 -20 replies
7/9: associate locally generated icmp errors with conntrack of original packetnet/core/netfilter.c net/ipv4/icmp.c net/ipv4/netfilter/ipt_REJECT.c+18 -200 replies
8/9: Fix invalid tcp/udp checksums within NATed icmp errorsnet/ipv4/netfilter/ip_nat_core.c net/ipv4/netfilter/ip_nat_proto_icmp.c net/ipv4/netfilter/ip_nat_proto_tcp.c +2 more+15 -90 replies
9/9: revert MASQUERADE optimization for mostly static IPsnet/ipv4/netfilter/ipt_MASQUERADE.c+36 -240 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 2.6 0/9]: Netfilter Update

Hi Dave,

the next 9 patches contain Yasuyuki's remaining ip6tables fixes and skb_header_pointer conversions, some ip_queue fixes and a fix for an information leak with DNAT and locally generated icmp errors.

You can pull all changes from bk changes bk://212.42.230.204/nf-2.6

Regards
Patrick

Patrick McHardy:
o Merge coreworks.de:/home/kaber/src/nf/nf-2.6-icmp into
coreworks.de:/home/kaber/src/nf/nf-2.6
o Merge coreworks.de:/home/kaber/src/nf/nf-2.6-ipq into
coreworks.de:/home/kaber/src/nf/nf-2.6
o Merge coreworks.de:/home/kaber/src/nf/nf-2.6-ip6tables into
coreworks.de:/home/kaber/src/nf/nf-2.6
o [NETFILTER]: Fix invalid tcp/udp checksums within NATed icmp errors
o [NETFILTER]: associate locally generated icmp errors with conntrack
of original packet
o [NETFILTER]: Enable rx timestamps in ip_queue/ip6_queue
o [NET]: Move rx timestamp functions to net/core/dev.c
o [NETFILTER]: Handle nonlinear skbs in ip_queue/ip6_queue

Phil Oester:
o [NETFILTER]: revert MASQUERADE optimization for mostly static IPs

Yasuyuki Kozakai:
o [NETFILTER]: Make eui64 match usuable in FORWARD chain
o [NETFILTER]: introduce skb_header_pointer() to ipv6header match
o [NETFILTER]: Fix multiple bugs in ipv6header match

Read the cover letter in its thread