From: Patrick McHardy <kaber@trash.net>
To: davem@davemloft.net
Cc: Patrick McHardy <kaber@trash.net>, netfilter-devel@vger.kernel.org
Subject: [NETFILTER 00/69]: Netfilter Update
Date: Wed, 30 Jan 2008 21:16:52 +0100 (MET) [thread overview]
Message-ID: <20080130201650.29874.7456.sendpatchset@localhost.localdomain> (raw)
Hi Dave,
following is the final netfilter update for 2.6.25. containing the iptables
netns work by Alexey Dobriyan, lots of sparse warning fixes by Stephen, Eric
and myself, const annotations throughout netfilter by Jan Engelhardt,
a set of patches to finally use RCU for the conntrack and NAT hashes, some
conntrack optimizations and some minor misc cleanups.
Please apply, thanks.
include/linux/netfilter/nf_conntrack_pptp.h | 2 +-
include/linux/netfilter/nf_conntrack_sip.h | 6 +-
include/linux/netfilter/x_tables.h | 28 +-
include/linux/netfilter/xt_conntrack.h | 30 +-
include/linux/netfilter/xt_hashlimit.h | 37 ++-
include/linux/netfilter/xt_owner.h | 4 +-
include/linux/netfilter_arp/arp_tables.h | 5 +-
include/linux/netfilter_ipv4/ip_tables.h | 5 +-
include/linux/netfilter_ipv6/ip6_tables.h | 5 +-
include/linux/skbuff.h | 3 -
include/linux/types.h | 2 +-
include/net/arp.h | 8 +-
include/net/net_namespace.h | 4 +
include/net/netfilter/nf_conntrack.h | 15 +-
include/net/netfilter/nf_conntrack_core.h | 6 +-
include/net/netfilter/nf_conntrack_expect.h | 2 +
include/net/netfilter/nf_conntrack_helper.h | 4 -
include/net/netfilter/nf_conntrack_l3proto.h | 4 +-
include/net/netfilter/nf_conntrack_l4proto.h | 25 +-
include/net/netfilter/nf_conntrack_tuple.h | 17 +-
include/net/netfilter/nf_log.h | 2 +-
include/net/netns/ipv4.h | 6 +
include/net/netns/ipv6.h | 5 +
include/net/netns/x_tables.h | 10 +
net/bridge/br_netfilter.c | 4 -
net/bridge/netfilter/ebt_802_3.c | 10 +-
net/bridge/netfilter/ebt_among.c | 27 +-
net/bridge/netfilter/ebt_arp.c | 17 +-
net/bridge/netfilter/ebt_arpreply.c | 17 +-
net/bridge/netfilter/ebt_dnat.c | 8 +-
net/bridge/netfilter/ebt_ip.c | 14 +-
net/bridge/netfilter/ebt_limit.c | 6 +-
net/bridge/netfilter/ebt_log.c | 19 +-
net/bridge/netfilter/ebt_mark.c | 8 +-
net/bridge/netfilter/ebt_mark_m.c | 8 +-
net/bridge/netfilter/ebt_pkttype.c | 8 +-
net/bridge/netfilter/ebt_redirect.c | 8 +-
net/bridge/netfilter/ebt_snat.c | 11 +-
net/bridge/netfilter/ebt_stp.c | 28 +-
net/bridge/netfilter/ebt_ulog.c | 9 +-
net/bridge/netfilter/ebt_vlan.c | 12 +-
net/ipv4/arp.c | 9 +-
net/ipv4/netfilter/arp_tables.c | 102 ++++--
net/ipv4/netfilter/arptable_filter.c | 31 ++-
net/ipv4/netfilter/ip_queue.c | 18 +-
net/ipv4/netfilter/ip_tables.c | 112 ++++---
net/ipv4/netfilter/ipt_CLUSTERIP.c | 7 -
net/ipv4/netfilter/ipt_recent.c | 6 +-
net/ipv4/netfilter/iptable_filter.c | 33 ++-
net/ipv4/netfilter/iptable_mangle.c | 33 ++-
net/ipv4/netfilter/iptable_raw.c | 33 ++-
net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c | 14 +-
.../netfilter/nf_conntrack_l3proto_ipv4_compat.c | 40 ++-
net/ipv4/netfilter/nf_conntrack_proto_icmp.c | 22 +-
net/ipv4/netfilter/nf_nat_core.c | 42 +--
net/ipv4/netfilter/nf_nat_h323.c | 5 +-
net/ipv4/netfilter/nf_nat_helper.c | 3 +-
net/ipv4/netfilter/nf_nat_pptp.c | 10 +-
net/ipv4/netfilter/nf_nat_proto_gre.c | 16 +-
net/ipv4/netfilter/nf_nat_proto_icmp.c | 2 +-
net/ipv4/netfilter/nf_nat_proto_tcp.c | 2 +-
net/ipv4/netfilter/nf_nat_proto_udp.c | 2 +-
net/ipv4/netfilter/nf_nat_rule.c | 16 +-
net/ipv4/netfilter/nf_nat_sip.c | 4 +-
net/ipv4/netfilter/nf_nat_snmp_basic.c | 2 +-
net/ipv4/netfilter/nf_nat_tftp.c | 2 +-
net/ipv6/netfilter/ip6_queue.c | 18 +-
net/ipv6/netfilter/ip6_tables.c | 113 ++++---
net/ipv6/netfilter/ip6table_filter.c | 33 ++-
net/ipv6/netfilter/ip6table_mangle.c | 33 ++-
net/ipv6/netfilter/ip6table_raw.c | 31 ++-
net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c | 7 +-
net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c | 22 +-
net/ipv6/netfilter/nf_conntrack_reasm.c | 16 +-
net/netfilter/nf_conntrack_core.c | 234 +++++++------
net/netfilter/nf_conntrack_expect.c | 53 ++--
net/netfilter/nf_conntrack_h323_asn1.c | 156 +++++----
net/netfilter/nf_conntrack_h323_main.c | 23 +-
net/netfilter/nf_conntrack_h323_types.c | 346 ++++++++++----------
net/netfilter/nf_conntrack_helper.c | 60 +---
net/netfilter/nf_conntrack_irc.c | 2 +-
net/netfilter/nf_conntrack_netlink.c | 68 ++--
net/netfilter/nf_conntrack_pptp.c | 14 +-
net/netfilter/nf_conntrack_proto_generic.c | 6 +-
net/netfilter/nf_conntrack_proto_gre.c | 6 +-
net/netfilter/nf_conntrack_proto_sctp.c | 6 +-
net/netfilter/nf_conntrack_proto_tcp.c | 192 ++++++------
net/netfilter/nf_conntrack_proto_udp.c | 19 +-
net/netfilter/nf_conntrack_proto_udplite.c | 19 +-
net/netfilter/nf_conntrack_sane.c | 9 +-
net/netfilter/nf_conntrack_sip.c | 29 +-
net/netfilter/nf_conntrack_standalone.c | 66 ++--
net/netfilter/nf_conntrack_tftp.c | 5 +-
net/netfilter/nf_log.c | 2 +
net/netfilter/nfnetlink_log.c | 4 +-
net/netfilter/nfnetlink_queue.c | 6 +-
net/netfilter/x_tables.c | 313 ++++++++++++-------
net/netfilter/xt_TCPMSS.c | 62 ++++-
net/netfilter/xt_connlimit.c | 6 +-
net/netfilter/xt_conntrack.c | 50 +++-
net/netfilter/xt_hashlimit.c | 324 ++++++++++++++++--
net/netfilter/xt_iprange.c | 2 +-
net/netfilter/xt_owner.c | 14 +-
103 files changed, 2089 insertions(+), 1295 deletions(-)
create mode 100644 include/net/netns/x_tables.h
Alexey Dobriyan (13):
[NETFILTER]: x_tables: change xt_table_register() return value convention
[NETFILTER]: x_tables: per-netns xt_tables
[NETFILTER]: x_tables: return new table from {arp,ip,ip6}t_register_table()
[NETFILTER]: ip_tables: propagate netns from userspace
[NETFILTER]: ip_tables: per-netns FILTER, MANGLE, RAW
[NETFILTER]: ip6_tables: netns preparation
[NETFILTER]: ip6_tables: per-netns IPv6 FILTER, MANGLE, RAW
[NETFILTER]: arp_tables: netns preparation
[NETFILTER]: arp_tables: per-netns arp_tables FILTER
[NETFILTER]: netns: put table module on netns stop
[NETFILTER]: x_tables: semi-rewrite of /proc/net/foo_tables_*
[NETFILTER]: x_tables: netns propagation for /proc/net/*_tables_names
[NETFILTER]: x_tables: create per-netns /proc/net/*_tables_*
Eric Dumazet (1):
[NETFILTER]: Supress some sparse warnings
Eric Leblond (1):
[NETFILTER]: nf_conntrack_netlink: transmit mark during all events
Helge Deller (1):
[NETFILTER]: nf_log: add netfilter gcc printf format checking
Ilpo Järvinen (2):
[NETFILTER]: ipt_CLUSTERIP: kill clusterip_config_entry_get
[NETFILTER]: nf_conntrack: kill unused static inline (do_iter)
Jan Engelhardt (20):
[NETFILTER]: Use const in struct xt_match, xt_target, xt_table
linux/types.h: Use __u64 for aligned_u64
[NETFILTER]: xt_conntrack: add port and direction matching
[NETFILTER]: ebtables: remove casts, use consts
[NETFILTER]: ebtables: Update modules' descriptions
[NETFILTER]: ebtables: mark matches, targets and watchers __read_mostly
[NETFILTER]: xt_TCPMSS: consider reverse route's MTU in clamp-to-pmtu
[NETFILTER]: xt_owner: allow matching UID/GID ranges
[NETFILTER]: nf_conntrack_h323: clean up code a bit
[NETFILTER]: xt_hashlimit match, revision 1
[NETFILTER]: nf_conntrack_h323: constify and annotate H.323 helper
[NETFILTER]: nf_{conntrack,nat}_sip: annotate SIP helper with const
[NETFILTER]: nf_{conntrack,nat}_tftp: annotate TFTP helper with const
[NETFILTER]: nf_{conntrack,nat}_pptp: annotate PPtP helper with const
[NETFILTER]: nf_conntrack_sane: annotate SANE helper with const
[NETFILTER]: nf_{conntrack,nat}_proto_tcp: constify and annotate TCP modules
[NETFILTER]: nf_{conntrack,nat}_proto_udp{,lite}: annotate with const
[NETFILTER]: nf_{conntrack,nat}_proto_gre: annotate with const
[NETFILTER]: nf_{conntrack,nat}_icmp: constify and annotate
[NETFILTER]: nf_conntrack: annotate l3protos with const
Patrick McHardy (25):
[NETFILTER]: nf_nat: remove double bysource hash initialization
[NETFILTER]: bridge netfilter: remove nf_bridge_info read-only netoutdev member
[NETFILTER]: nfnetlink_log: fix typo
[NETFILTER]: ipt_recent: fix sparse warnings
[NETFILTER]: {ip,arp,ip6}_tables: fix sparse warnings in compat code
[NETFILTER]: nf_conntrack_ipv6: fix sparse warnings
[NETFILTER]: nf_conntrack_netlink: fix unbalanced locking
[NETFILTER]: nf_conntrack: fix accounting with fixed timeouts
[NETFILTER]: nf_conntrack: use RCU for conntrack helpers
[NETFILTER]: nf_conntrack_core: avoid taking nf_conntrack_lock in nf_conntrack_alter_reply
[NETFILTER]: nf_conntrack_expect: use RCU for expectation hash
[NETFILTER]: nf_conntrack: use RCU for conntrack hash
[NETFILTER]: nf_conntrack: switch rwlock to spinlock
[NETFILTER]: nf_conntrack: optimize __nf_conntrack_find()
[NETFILTER]: nf_conntrack: avoid duplicate protocol comparison in nf_ct_tuple_equal()
[NETFILTER]: nf_conntrack: optimize hash_conntrack()
[NETFILTER]: nf_conntrack: reorder struct nf_conntrack_l4proto
[NETFILTER]: nf_conntrack: don't inline early_drop()
[NETFILTER]: nf_conntrack: naming unification
[NETFILTER]: nf_nat: use RCU for bysource hash
[NETFILTER]: nf_nat: switch rwlock to spinlock
[NETFILTER]: {ip,ip6}_queue: fix build error
[NETFILTER]: nf_conntrack: fix sparse warning
[NETFILTER]: nf_nat: fix sparse warning
[NETFILTER]: xt_iprange: fix sparse warnings
Stephen Hemminger (6):
[NETFILTER]: nf_nat_snmp: sparse warning
[NETFILTER]: nf_conntrack: sparse warnings
[NETFILTER]: nfnetlink_log: sparse warning fixes
[NETFILTER]: conntrack: get rid of sparse warnings
[NETFILTER]: more sparse fixes
[NETFILTER]: nf_conntrack_h3223: sparse fixes
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
next reply other threads:[~2008-01-30 20:16 UTC|newest]
Thread overview: 95+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-01-30 20:16 Patrick McHardy [this message]
2008-01-30 20:16 ` [NETFILTER 01/69]: Supress some sparse warnings Patrick McHardy
2008-01-30 20:16 ` [NETFILTER 02/69]: Use const in struct xt_match, xt_target, xt_table Patrick McHardy
2008-01-30 20:16 ` linux/types.h: Use __u64 for aligned_u64 Patrick McHardy
2008-01-30 20:16 ` [NETFILTER 04/69]: nf_nat: remove double bysource hash initialization Patrick McHardy
2008-01-30 20:16 ` [NETFILTER 05/69]: bridge netfilter: remove nf_bridge_info read-only netoutdev member Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 06/69]: nfnetlink_log: fix typo Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 07/69]: xt_conntrack: add port and direction matching Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 08/69]: nf_log: add netfilter gcc printf format checking Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 09/69]: ebtables: remove casts, use consts Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 10/69]: ebtables: Update modules' descriptions Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 11/69]: ebtables: mark matches, targets and watchers __read_mostly Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 12/69]: x_tables: change xt_table_register() return value convention Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 13/69]: x_tables: per-netns xt_tables Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 14/69]: x_tables: return new table from {arp,ip,ip6}t_register_table() Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 15/69]: ip_tables: propagate netns from userspace Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 16/69]: ip_tables: per-netns FILTER, MANGLE, RAW Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 17/69]: ip6_tables: netns preparation Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 18/69]: ip6_tables: per-netns IPv6 FILTER, MANGLE, RAW Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 19/69]: arp_tables: netns preparation Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 20/69]: arp_tables: per-netns arp_tables FILTER Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 21/69]: netns: put table module on netns stop Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 22/69]: xt_TCPMSS: consider reverse route's MTU in clamp-to-pmtu Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 23/69]: xt_owner: allow matching UID/GID ranges Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 24/69]: nf_nat_snmp: sparse warning Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 25/69]: nf_conntrack: sparse warnings Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 26/69]: nfnetlink_log: sparse warning fixes Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 27/69]: conntrack: get rid of sparse warnings Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 28/69]: more sparse fixes Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 29/69]: nf_conntrack_h3223: " Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 30/69]: ipt_recent: fix sparse warnings Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 31/69]: {ip,arp,ip6}_tables: fix sparse warnings in compat code Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 32/69]: nf_conntrack_ipv6: fix sparse warnings Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 33/69]: nf_conntrack_netlink: fix unbalanced locking Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 34/69]: nf_conntrack: fix accounting with fixed timeouts Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 35/69]: nf_conntrack: use RCU for conntrack helpers Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 36/69]: nf_conntrack_core: avoid taking nf_conntrack_lock in nf_conntrack_alter_reply Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 37/69]: nf_conntrack_expect: use RCU for expectation hash Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 38/69]: nf_conntrack: use RCU for conntrack hash Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 39/69]: nf_conntrack: switch rwlock to spinlock Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 40/69]: nf_conntrack: optimize __nf_conntrack_find() Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 41/69]: nf_conntrack: avoid duplicate protocol comparison in nf_ct_tuple_equal() Patrick McHardy
2008-01-30 20:17 ` [NETFILTER 42/69]: nf_conntrack: optimize hash_conntrack() Patrick McHardy
2008-04-28 8:24 ` Philip Craig
2008-04-28 13:59 ` Patrick McHardy
2008-04-29 4:48 ` Philip Craig
2008-04-29 5:44 ` David Miller
2008-04-29 6:00 ` Philip Craig
2008-04-29 6:14 ` David Miller
2008-04-29 6:50 ` Philip Craig
2008-04-29 6:56 ` David Miller
2008-04-29 7:00 ` Philip Craig
2008-04-29 5:44 ` Philip Craig
2008-04-29 5:54 ` Patrick McHardy
2008-04-29 8:40 ` Philip Craig
2008-04-29 10:20 ` David Miller
2008-04-29 10:22 ` Patrick McHardy
2008-04-29 10:35 ` David Miller
2008-01-30 20:18 ` [NETFILTER 43/69]: nf_conntrack: reorder struct nf_conntrack_l4proto Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 44/69]: nf_conntrack: don't inline early_drop() Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 45/69]: nf_conntrack: naming unification Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 46/69]: nf_nat: use RCU for bysource hash Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 47/69]: nf_nat: switch rwlock to spinlock Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 48/69]: nf_conntrack_h323: clean up code a bit Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 49/69]: nf_conntrack_netlink: transmit mark during all events Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 50/69]: ipt_CLUSTERIP: kill clusterip_config_entry_get Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 51/69]: nf_conntrack: kill unused static inline (do_iter) Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 52/69]: xt_hashlimit match, revision 1 Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 53/69]: x_tables: semi-rewrite of /proc/net/foo_tables_* Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 54/69]: x_tables: netns propagation for /proc/net/*_tables_names Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 55/69]: x_tables: create per-netns /proc/net/*_tables_* Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 56/69]: nf_conntrack_h323: constify and annotate H.323 helper Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 57/69]: nf_{conntrack,nat}_sip: annotate SIP helper with const Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 58/69]: nf_{conntrack,nat}_tftp: annotate TFTP " Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 59/69]: nf_{conntrack,nat}_pptp: annotate PPtP " Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 60/69]: nf_conntrack_sane: annotate SANE " Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 61/69]: nf_{conntrack,nat}_proto_tcp: constify and annotate TCP modules Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 62/69]: nf_{conntrack,nat}_proto_udp{,lite}: annotate with const Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 63/69]: nf_{conntrack,nat}_proto_gre: " Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 64/69]: nf_{conntrack,nat}_icmp: constify and annotate Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 65/69]: nf_conntrack: annotate l3protos with const Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 66/69]: {ip,ip6}_queue: fix build error Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 67/69]: nf_conntrack: fix sparse warning Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 68/69]: nf_nat: " Patrick McHardy
2008-01-30 20:18 ` [NETFILTER 69/69]: xt_iprange: fix sparse warnings Patrick McHardy
2008-01-30 20:20 ` [NETFILTER 00/69]: Netfilter Update Jan Engelhardt
2008-01-30 20:22 ` Patrick McHardy
2008-01-30 20:26 ` Jan Engelhardt
2008-01-30 20:55 ` Jan Engelhardt
2008-01-30 21:27 ` Patrick McHardy
2008-01-30 21:30 ` Jan Engelhardt
2008-01-30 21:31 ` Patrick McHardy
2008-01-30 21:34 ` Patrick McHardy
2008-01-31 0:54 ` David Miller
2008-01-31 12:56 ` David Miller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20080130201650.29874.7456.sendpatchset@localhost.localdomain \
--to=kaber@trash.net \
--cc=davem@davemloft.net \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.