David S. Miller
e3a88f9c4f
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
...
Pablo Neira Ayuso says:
====================
netfilter/ipvs fixes for net
The following patchset contains fixes for netfilter/ipvs. This round of
fixes is larger than usual at this stage, specifically because of the
nf_tables bridge reject fixes that I would like to see in 3.18. The
patches are:
1) Fix a null-pointer dereference that may occur when logging
errors. This problem was introduced by 4a4739d56b ("ipvs: Pull
out crosses_local_route_boundary logic") in v3.17-rc5.
2) Update hook mask in nft_reject_bridge so we can also filter out
packets from there. This fixes 36d2af5 ("netfilter: nf_tables: allow
to filter from prerouting and postrouting"), which needs this chunk
to work.
3) Two patches to refactor common code to forge the IPv4 and IPv6
reject packets from the bridge. These are required by the nf_tables
reject bridge fix.
4) Fix nft_reject_bridge by avoiding the use of the IP stack to reject
packets from the bridge. The idea is to forge the reject packets and
inject them to the original port via br_deliver() which is now
exported for that purpose.
5) Restrict nft_reject_bridge to bridge prerouting and input hooks.
the original skbuff may cloned after prerouting when the bridge stack
needs to flood it to several bridge ports, it is too late to reject
the traffic.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
2014-10-31 12:29:42 -04:00
..
netfilter
netfilter: nf_reject_ipv6: split nf_send_reset6() in smaller functions
2014-10-31 12:49:57 +01:00
addrconf.c
ipv6: notify userspace when we added or changed an ipv6 token
2014-10-29 14:35:32 -04:00
addrconf_core.c
ipv6: remove rt6i_genid
2014-09-30 14:00:48 -04:00
addrlabel.c
list: fix order of arguments for hlist_add_after(_rcu)
2014-08-06 18:01:24 -07:00
af_inet6.c
ipv6: make fib6 serial number per namespace
2014-10-07 00:02:30 -04:00
ah6.c
ipsec: Remove obsolete MAX_AH_AUTH_LEN
2014-09-18 10:54:36 +02:00
anycast.c
ipv6: remove aca_lock spinlock from struct ifacaddr6
2014-10-14 13:15:15 -04:00
datagram.c
sock: deduplicate errqueue dequeue
2014-09-01 21:49:08 -07:00
esp6.c
ipv6: White-space cleansing : Structure layouts
2014-08-24 22:37:52 -07:00
exthdrs.c
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
exthdrs_core.c
exthdrs_offload.c
fib6_rules.c
icmp.c
ipv6: Do not warn for informational ICMP messages, regardless of type.
2014-10-07 16:33:53 -04:00
inet6_connection_sock.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
inet6_hashtables.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
ip6_checksum.c
ip6_fib.c
ipv6: don't walk node's leaf during serial number update
2014-10-07 00:02:30 -04:00
ip6_flowlabel.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
ip6_gre.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2014-10-08 16:22:22 -04:00
ip6_icmp.c
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
ip6_input.c
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
ip6_offload.c
net: gso: use feature flag argument in all protocol gso handlers
2014-10-20 12:38:12 -04:00
ip6_offload.h
ip6_output.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2014-09-23 12:09:27 -04:00
ip6_tunnel.c
net: better IFF_XMIT_DST_RELEASE support
2014-10-07 13:22:11 -04:00
ip6_udp_tunnel.c
udp: Need to make ip6_udp_tunnel.c have GPL license
2014-09-22 15:08:25 -04:00
ip6_vti.c
net: better IFF_XMIT_DST_RELEASE support
2014-10-07 13:22:11 -04:00
ip6mr.c
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
ipcomp6.c
ipv6: White-space cleansing : Structure layouts
2014-08-24 22:37:52 -07:00
ipv6_sockglue.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
Kconfig
Makefile
udp_tunnel: Only build ip6_udp_tunnel.c when IPV6 is selected
2014-09-19 22:05:28 -04:00
mcast.c
ipv6: mld: answer mldv2 queries with mldv1 reports in mldv1 fallback
2014-09-22 16:23:15 -04:00
mip6.c
ipv6: White-space cleansing : Structure layouts
2014-08-24 22:37:52 -07:00
ndisc.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
netfilter.c
output_core.c
drivers/net, ipv6: Select IPv6 fragment idents for virtio UFO packets
2014-10-30 20:01:18 -04:00
ping.c
proc.c
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
protocol.c
net: Export inet_offloads and inet6_offloads
2014-09-19 17:15:31 -04:00
raw.c
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
reassembly.c
ipv6: White-space cleansing : Structure layouts
2014-08-24 22:37:52 -07:00
route.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2014-10-02 11:25:43 -07:00
sit.c
ipv6: fix a potential use after free in sit.c
2014-10-18 13:04:09 -04:00
syncookies.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2014-10-18 09:31:37 -07:00
sysctl_net_ipv6.c
ipv6: add sysctl_mld_qrv to configure query robustness variable
2014-09-04 22:26:14 -07:00
tcp_ipv6.c
net: fix saving TX flow hash in sock for outgoing connections
2014-10-22 16:14:29 -04:00
tcpv6_offload.c
net: Remove gso_send_check as an offload callback
2014-09-26 00:22:47 -04:00
tunnel6.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
udp.c
udp: Add support for doing checksum unnecessary conversion
2014-09-01 21:36:28 -07:00
udp_impl.h
udp_offload.c
fou: eliminate IPv4,v6 specific GRO functions
2014-10-03 16:53:32 -07:00
udplite.c
xfrm6_input.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
xfrm6_mode_beet.c
xfrm6_mode_ro.c
xfrm6_mode_transport.c
xfrm6_mode_tunnel.c
xfrm6_output.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00
xfrm6_policy.c
xfrm6: fix a potential use after free in xfrm6_policy.c
2014-10-22 15:38:48 -04:00
xfrm6_protocol.c
xfrm6_state.c
ipv6: White-space cleansing : Line Layouts
2014-08-24 22:37:52 -07:00
xfrm6_tunnel.c
ipv6: White-space cleansing : gaps between function and symbol export
2014-08-24 22:37:52 -07:00