From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.0 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PULL_REQUEST,MAILING_LIST_MULTI, MENTIONS_GIT_HOSTING,SPF_PASS,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 65588C43381 for ; Sun, 17 Feb 2019 23:24:08 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 3D6AE20C01 for ; Sun, 17 Feb 2019 23:24:08 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727327AbfBQXYG (ORCPT ); Sun, 17 Feb 2019 18:24:06 -0500 Received: from mail.us.es ([193.147.175.20]:44216 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726283AbfBQXYG (ORCPT ); Sun, 17 Feb 2019 18:24:06 -0500 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id 7DCC41B8404 for ; Mon, 18 Feb 2019 00:23:57 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 6C54ADA84E for ; Mon, 18 Feb 2019 00:23:57 +0100 (CET) Received: by antivirus1-rhel7.int (Postfix, from userid 99) id 61C0ADA7F4; Mon, 18 Feb 2019 00:23:57 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 64A85DA84E; Mon, 18 Feb 2019 00:23:55 +0100 (CET) Received: from 192.168.1.97 (192.168.1.97) by antivirus1-rhel7.int (F-Secure/fsigk_smtp/550/antivirus1-rhel7.int); Mon, 18 Feb 2019 00:23:55 +0100 (CET) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/antivirus1-rhel7.int) Received: from salvia.here (sys.soleta.eu [212.170.55.40]) (Authenticated sender: pneira@us.es) by entrada.int (Postfix) with ESMTPA id 3636D4265A2F; Mon, 18 Feb 2019 00:23:55 +0100 (CET) X-SMTPAUTHUS: auth mail.us.es From: Pablo Neira Ayuso To: netfilter-devel@vger.kernel.org Cc: davem@davemloft.net, netdev@vger.kernel.org Subject: [PATCH 00/11] Netfilter/IPVS updates for net-next Date: Mon, 18 Feb 2019 00:23:46 +0100 Message-Id: <20190217232357.29858-1-pablo@netfilter.org> X-Mailer: git-send-email 2.11.0 X-Virus-Scanned: ClamAV using ClamSMTP Sender: netdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org Hi David, The following patchset contains Netfilter/IPVS updates for you net-next tree: 1) Missing NFTA_RULE_POSITION_ID netlink attribute validation, from Phil Sutter. 2) Restrict matching on tunnel metadata to rx/tx path, from wenxu. 3) Avoid indirect calls for IPV6=y, from Florian Westphal. 4) Add two indirections to prepare merger of IPV4 and IPV6 nat modules, from Florian Westphal. 5) Broken indentation in ctnetlink, from Colin Ian King. 6) Patches to use struct_size() from netfilter and IPVS, from Gustavo A. R. Silva. 7) Display kernel splat only once in case of racing to confirm conntrack from bridge plus nfqueue setups, from Chieh-Min Wang. 8) Skip checksum validation for layer 4 protocols that don't need it, patch from Alin Nastac. 9) Sparse warning due to symbol that should be static in CLUSTERIP, from Wei Yongjun. 10) Add new toggle to disable SDP payload translation when media endpoint is reachable though the same interface as the signalling peer, from Alin Nastac. You can pull these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git Thanks! ---------------------------------------------------------------- The following changes since commit bbcbf2eede69c5f54a431fb96c11248a7910748c: enetc: include linux/vmalloc.h for vzalloc etc (2019-01-28 22:43:34 -0800) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git HEAD for you to fetch changes up to a3419ce3356cf1fdc69a0524eced84cef730b3bf: netfilter: nf_conntrack_sip: add sip_external_media logic (2019-02-16 10:49:12 +0100) ---------------------------------------------------------------- Alin Nastac (2): netfilter: reject: skip csum verification for protocols that don't support it netfilter: nf_conntrack_sip: add sip_external_media logic Chieh-Min Wang (1): netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrack_confirm Colin Ian King (1): netfilter: conntrack: fix indentation issue Florian Westphal (3): netfilter: nf_tables: add NFTA_RULE_POSITION_ID to nla_policy netfilter: nat: remove module dependency on ipv6 core netfilter: ipv6: avoid indirect calls for IPV6=y case Gustavo A. R. Silva (2): ipvs: Use struct_size() helper netfilter: xt_recent: Use struct_size() in kvzalloc() Wei Yongjun (1): netfilter: ipt_CLUSTERIP: make symbol 'cip_netdev_notifier' static wenxu (1): netfilter: nft_tunnel: Add NFTA_TUNNEL_MODE options include/linux/netfilter_ipv6.h | 60 +++++++++++++++++++++++++---- include/net/netfilter/ipv4/nf_reject.h | 1 + include/net/netfilter/ipv6/nf_reject.h | 1 + include/net/netfilter/nf_reject.h | 27 +++++++++++++ include/uapi/linux/netfilter/nf_tables.h | 9 +++++ net/bridge/netfilter/nft_reject_bridge.c | 10 ++--- net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +- net/ipv4/netfilter/nf_reject_ipv4.c | 9 +---- net/ipv6/netfilter.c | 13 +++++-- net/ipv6/netfilter/nf_nat_l3proto_ipv6.c | 17 +++++++- net/ipv6/netfilter/nf_nat_masquerade_ipv6.c | 21 +++++++++- net/ipv6/netfilter/nf_reject_ipv6.c | 3 ++ net/ipv6/netfilter/nft_fib_ipv6.c | 9 +---- net/netfilter/ipvs/ip_vs_ctl.c | 6 +-- net/netfilter/nf_conntrack_core.c | 14 +++++-- net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_conntrack_sip.c | 42 ++++++++++++++++++++ net/netfilter/nf_tables_api.c | 1 + net/netfilter/nft_tunnel.c | 34 +++++++++++++++- net/netfilter/utils.c | 6 +-- net/netfilter/xt_addrtype.c | 16 +++----- net/netfilter/xt_recent.c | 4 +- 22 files changed, 244 insertions(+), 63 deletions(-) create mode 100644 include/net/netfilter/nf_reject.h