: Netfilter IPsec support
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest10 patches 12 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/10 | : [NETFILTER]: Remove okfn usage in ip_vs_core.cnet/ | +1 | 0 replies | |
| 2/10 | : [NETFILTER]: Defer fragmentation in ip_output when connection tracking is usedinclude/ include/ net/ +2 more | +24 | 6 replies | |
| 3/10 | : [IPV4]: Replace dst_output by ip_dst_outputinclude/ include/ net/ +6 more | +13 | 0 replies | |
| 4/10 | : [IPV6]: Replace dst_output by ip6_dst_outputinclude/ net/ net/ +4 more | +14 | 0 replies | |
| 5/10 | : [IPV4/6]: Netfilter IPsec output hooksinclude/ net/ net/ +2 more | +66 | 0 replies | |
| 6/10 | : [IPV4/6]: Make input netfilter IPsec processing symetrical to outputinclude/ include/ net/ +3 more | +51 | 0 replies | |
| 7/10 | : [NETFILTER]: Fix xfrm lookup in ip_route_me_harderinclude/ net/ net/ | +11 | 0 replies | |
| 8/10 | : [NETFILTER]: Use conntrack information to determine if packet was NATednet/ | +19 | 0 replies | |
| 9/10 | : [NETFILTER]: Redo policy lookups after NAT when neccessaryinclude/ include/ net/ +3 more | +38 | 0 replies | |
| 10/10 | : [NETFILTER]: Handle NAT in IPsec policy checksinclude/ net/ net/ +7 more | +84 | 0 replies |
Reviews trailers per patch
1 of 10 patches has a Reviewed-by or Acked-by.
| Patch | Julian Anastasov |
|---|---|
| 1/10 | A-b |
| 2/10 | |
| 3/10 | |
| 4/10 | |
| 5/10 | |
| 6/10 | |
| 7/10 | |
| 8/10 | |
| 9/10 | |
| 10/10 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH 00/10]: Netfilter IPsec support
This is the latest set patches for netfilter IPsec support. The use of netif_rx for the innermost SA if it used transport mode has been replaced by explicit NF_HOOK calls in xfrm{4,6}_input.c.
[NETFILTER]: Remove okfn usage in ip_vs_core.c
[NETFILTER]: Defer fragmentation in ip_output when connection tracking is used [IPV4]: Replace dst_output by ip_dst_output
[IPV6]: Replace dst_output by ip6_dst_output
[IPV4/6]: Netfilter IPsec output hooks
[IPV4/6]: Make input netfilter IPsec processing symetrical to output [NETFILTER]: Fix xfrm lookup in ip_route_me_harder
[NETFILTER]: Use conntrack information to determine if packet was NATed [NETFILTER]: Redo policy lookups after NAT when neccessary [NETFILTER]: Handle NAT in IPsec policy checks