: Netfilter resync with 2.6

Patrick McHardy netfilter-devel 1 version Dec 20, 2004 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Dec 20, 200418 patches 5 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/18	: Associate locally generated ICMP errors with conntrack of original packet`include/net/ip.h` `net/core/netfilter.c` `net/ipv4/icmp.c` +5 more	+37 ~~-30~~	0 replies
2/18	: Remove CONFIG_IP_NF_NAT_LOCAL config option`arch/mips/defconfig-bosporus` `arch/mips/defconfig-mtx-1` `arch/mips64/defconfig` +17 more	+4 ~~-63~~	0 replies
3/18	: Save a level of indentation in icmp_reply_translation	+0 -0	0 replies
4/18	: Apply PRE_ROUTING manips in LOCAL_OUT for locally generated icmp errors	+0 -0	0 replies
5/18	: Verify NAT manips have been applied before reversing them in icmp_reply_translation`net/ipv4/netfilter/ip_conntrack_core.c` `net/ipv4/netfilter/ip_conntrack_standalone.c` `net/ipv4/netfilter/ip_fw_compat_masq.c` +1 more	+41 -6	0 replies
6/18	: Release dst_entry in PRE_ROUTING after NAT	+0 -0	0 replies
7/18	: revert MASQUERADE optimization for mostly static IPs`net/ipv4/netfilter/ipt_MASQUERADE.c`	+41 ~~-14~~	0 replies
8/18	: Backport fixes for ip6t_LOG`net/ipv6/netfilter/ip6t_LOG.c`	+160 ~~-70~~	0 replies
9/18	: Backport fixes for ip6t_dst	+0 -0	0 replies
10/18	: Fix check for ESP header size in ip6t_esp	+0 -0	0 replies
11/18	: Backport fixes for ip6t_eui64	+0 -0	0 replies
12/18	: Backport fixes for ip6t_frag	+0 -0	0 replies
13/18	: Backport fixes for ip6t_hbh	+0 -0	0 replies
14/18	: Backport fixes for ip6t_ipv6header	+0 -0	0 replies
15/18	: Backport fixes for ip6t_multiport	+0 -0	0 replies
16/18	: Backport fixes for ip6t_rt	+0 -0	0 replies
17/18	: Backport fixes for ip6tables	+0 -0	0 replies
18/18	: Fix stack leakage in iptables/ip6_tables`net/ipv6/netfilter/ip6_tables.c`	+1 -1	0 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 2.4 0/18]: Netfilter resync with 2.6

Hi Dave,

the following 18 patches resync netfilter in 2.4 with 2.6. They contains the ICMP+NAT fixes, Yasuyuki's IPv6 fixes and two misc. fixes.

You can pull all changes from bk://212.42.230.204/nf-2.4

Regards
Patrick

Patrick McHardy:
o Merge coreworks.de:/home/kaber/src/nf/nf-2.4-misc into
coreworks.de:/home/kaber/src/nf/nf-2.4
o Merge coreworks.de:/home/kaber/src/nf/nf-2.4-nat into
coreworks.de:/home/kaber/src/nf/nf-2.4
o Merge coreworks.de:/home/kaber/src/nf/nf-2.4-ip6tables into
coreworks.de:/home/kaber/src/nf/nf-2.4
o [NETFILTER]: Fix stack leakage in iptables/ip6_tables
o [NETFILTER]: Release dst_entry in PRE_ROUTING after NAT
o [NETFILTER]: Verify NAT manips have been applied before reversing
them in icmp_reply_translation
o [NETFILTER]: Apply PRE_ROUTING manips in LOCAL_OUT for locally
generated icmp errors
o [NETFILTER]: Save a level of indentation in icmp_reply_translation
o [NETFILTER]: Remove CONFIG_IP_NF_NAT_LOCAL config option
o [NETFILTER]: Associate locally generated ICMP errors with conntrack
of original packet

Phil Oester:
o [NETFILTER]: revert MASQUERADE optimization for mostly static IPs

Yasuyuki Kozakai:
o [NETFILTER]: Backport fixes for ip6tables
o [NETFILTER]: Backport fixes for ip6t_rt
o [NETFILTER]: Backport fixes for ip6t_multiport
o [NETFILTER]: Backport fixes for ip6t_ipv6header
o [NETFILTER]: Backport fixes for ip6t_hbh
o [NETFILTER]: Backport fixes for ip6t_frag
o [NETFILTER]: Backport fixes for ip6t_eui64
o [NETFILTER]: Fix check for ESP header size in ip6t_esp
o [NETFILTER]: Backport fixes for ip6t_dst
o [NETFILTER]: Backport fixes for ip6t_LOG

Read the cover letter in its thread