Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
netfilter fixes for net
The following patchset contains fixes for your net tree, they are:
* Remove extra quote from connlimit configuration in Kconfig, from
Randy Dunlap.
* Fix missing mss option in syn packets sent to the backend in our
new synproxy target, from Martin Topholm.
* Use window scale announced by client when sending the forged
syn to the backend, from Martin Topholm.
* Fix IPv6 address comparison in ebtables, from Luís Fernando
Cornachioni Estrozi.
* Fix wrong endianess in sequence adjustment which breaks helpers
in NAT configurations, from Phil Oester.
* Fix the error path handling of nft_compat, from me.
* Make sure the global conntrack counter is decremented after the
object has been released, also from me.
====================
Signed-off-by:
David S. Miller <davem@davemloft.net>
No related branches found
No related tags found
Showing
- net/bridge/netfilter/ebt_ip6.c 5 additions, 3 deletionsnet/bridge/netfilter/ebt_ip6.c
- net/ipv4/netfilter/ipt_SYNPROXY.c 1 addition, 0 deletionsnet/ipv4/netfilter/ipt_SYNPROXY.c
- net/ipv6/netfilter/ip6t_SYNPROXY.c 1 addition, 0 deletionsnet/ipv6/netfilter/ip6t_SYNPROXY.c
- net/netfilter/Kconfig 1 addition, 1 deletionnet/netfilter/Kconfig
- net/netfilter/nf_conntrack_core.c 2 additions, 1 deletionnet/netfilter/nf_conntrack_core.c
- net/netfilter/nf_conntrack_seqadj.c 2 additions, 2 deletionsnet/netfilter/nf_conntrack_seqadj.c
- net/netfilter/nf_synproxy_core.c 4 additions, 3 deletionsnet/netfilter/nf_synproxy_core.c
- net/netfilter/nft_compat.c 13 additions, 6 deletionsnet/netfilter/nft_compat.c
Loading
Please register or sign in to comment