: Netfilter Update

Hi Dave,

the next 9 patches contain Yasuyuki's remaining ip6tables fixes and skb_header_pointer conversions, some ip_queue fixes and a fix for an information leak with DNAT and locally generated icmp errors.

You can pull all changes from bk changes bk://212.42.230.204/nf-2.6

Regards
Patrick

Patrick McHardy:
o Merge coreworks.de:/home/kaber/src/nf/nf-2.6-icmp into
coreworks.de:/home/kaber/src/nf/nf-2.6
o Merge coreworks.de:/home/kaber/src/nf/nf-2.6-ipq into
coreworks.de:/home/kaber/src/nf/nf-2.6
o Merge coreworks.de:/home/kaber/src/nf/nf-2.6-ip6tables into
coreworks.de:/home/kaber/src/nf/nf-2.6
o [NETFILTER]: Fix invalid tcp/udp checksums within NATed icmp errors
o [NETFILTER]: associate locally generated icmp errors with conntrack
of original packet
o [NETFILTER]: Enable rx timestamps in ip_queue/ip6_queue
o [NET]: Move rx timestamp functions to net/core/dev.c
o [NETFILTER]: Handle nonlinear skbs in ip_queue/ip6_queue

Phil Oester:
o [NETFILTER]: revert MASQUERADE optimization for mostly static IPs

Yasuyuki Kozakai:
o [NETFILTER]: Make eui64 match usuable in FORWARD chain
o [NETFILTER]: introduce skb_header_pointer() to ipv6header match
o [NETFILTER]: Fix multiple bugs in ipv6header match

Pulled, thanks a lot Patrick.