[PATCH 0/7] Netfilter fixes for net

2016-06-01 Thread Pablo Neira Ayuso
Hi David, The following patchset contains Netfilter fixes for your net tree, they are: 1) Fix incorrect timestamp in nfnetlink_queue introduced when addressing y2038 safe timestamp, from Florian Westphal. 2) Get rid of leftover conntrack definition from the previous merge window, oneliner

[PATCH 0/7] Netfilter fixes for net

2016-06-17 Thread Pablo Neira Ayuso
Hi David, The following patchset contains Netfilter fixes for your net tree, they are rather small patches but fixing several outstanding bugs in nf_conntrack and nf_tables, as well as minor problems with missing SYNPROXY header uapi installation: 1) Oneliner not to leak conntrack kmemcache on mo

[PATCH 0/7] Netfilter fixes for net

2015-07-08 Thread Pablo Neira Ayuso
Hi David, The following patchset contains Netfilter fixes for your net tree. This batch mostly comes with patches to address fallout from the previous merge window cycle, they are: 1) Use entry->state.hook_list from nf_queue() instead of the global nf_hooks which is not valid when used from NF

[PATCH 0/7] Netfilter fixes for net

2018-03-24 Thread Pablo Neira Ayuso
Hi David, The following patchset contains Netfilter fixes for your net tree, they are: 1) Don't pick fixed hash implementation for NFT_SET_EVAL sets, otherwise userspace hits EOPNOTSUPP with valid rules using the meter statement, from Florian Westphal. 2) If you send a batch that flushes t

[PATCH 0/7] Netfilter fixes for net

2016-08-30 Thread Pablo Neira Ayuso
Hi David, The following patchset contains Netfilter fixes for your net tree, they are: 1) Allow nf_tables reject expression from input, forward and output hooks, since only there the routing information is available, otherwise we crash. 2) Fix unsafe list iteration when flushing timeout and a

[PATCH 0/7] Netfilter fixes for net

2020-06-25 Thread Pablo Neira Ayuso
Hi, The following patchset contains Netfilter fixes for net, they are: 1) Unaligned atomic access in ipset, from Russell King. 2) Missing module description, from Rob Gill. 3) Patches to fix a module unload causing NULL pointer dereference in xtables, from David Wilder. For the record, I pos

[PATCH 0/7] Netfilter fixes for net

2019-08-14 Thread Pablo Neira Ayuso
Hi, This patchset contains Netfilter fixes for net: 1) Extend selftest to cover flowtable with ipsec, from Florian Westphal. 2) Fix interaction of ipsec with flowtable, also from Florian. 3) User-after-free with bound set to rule that fails to load. 4) Adjust state and timeout for flows that e

[PATCH 0/7] Netfilter fixes for net

2019-01-14 Thread Pablo Neira Ayuso
Hi David, This is the first batch of Netfilter fixes for your net tree: 1) Fix endless loop in nf_tables rules netlink dump, from Phil Sutter. 2) Reference counter leak in object from the error path, from Taehee Yoo. 3) Selective rule dump requires table and chain. 4) Fix DNAT with nft_flow_of

[PATCH 0/7] Netfilter fixes for net

2020-10-22 Thread Pablo Neira Ayuso
Hi Jakub, The following patchset contains Netfilter fixes for net: 1) Update debugging in IPVS tcp protocol handler to make it easier to understand, from longguang.yue 2) Update TCP tracker to deal with keepalive packet after re-registration, from Franceso Ruggeri. 3) Missing IP6SKB_FRAGM

Re: [PATCH 0/7] Netfilter fixes for net

2016-06-01 Thread David Miller
From: Pablo Neira Ayuso Date: Wed, 1 Jun 2016 14:03:17 +0200 > The following patchset contains Netfilter fixes for your net tree, > they are: ... > You can pull these changes from: > > git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Pulled, thanks Pablo.

Re: [PATCH 0/7] Netfilter fixes for net

2016-06-17 Thread David Miller
From: Pablo Neira Ayuso Date: Fri, 17 Jun 2016 20:25:12 +0200 > The following patchset contains Netfilter fixes for your net tree, > they are rather small patches but fixing several outstanding bugs in > nf_conntrack and nf_tables, as well as minor problems with missing > SYNPROXY header uapi ins

Re: [PATCH 0/7] Netfilter fixes for net

2015-07-09 Thread David Miller
From: Pablo Neira Ayuso Date: Wed, 8 Jul 2015 11:48:13 +0200 > You can pull these changes from: > > git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Pulled, thanks a lot Pablo. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord..

Re: [PATCH 0/7] Netfilter fixes for net

2018-03-24 Thread David Miller
From: Pablo Neira Ayuso Date: Sat, 24 Mar 2018 21:34:16 +0100 > The following patchset contains Netfilter fixes for your net tree, > they are: ... > You can pull these changes from: > > git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Pulled, thank you.

Re: [PATCH 0/7] Netfilter fixes for net

2016-08-30 Thread David Miller
From: Pablo Neira Ayuso Date: Tue, 30 Aug 2016 13:26:16 +0200 > The following patchset contains Netfilter fixes for your net tree, > they are: ... > You can pull these changes from: > > git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Pulled, thanks a lot Pablo.

Re: [PATCH 0/7] Netfilter fixes for net

2020-06-25 Thread David Miller
From: Pablo Neira Ayuso Date: Thu, 25 Jun 2020 20:26:28 +0200 > The following patchset contains Netfilter fixes for net, they are: ... > Please, pull these changes from: > > git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Pulled, thanks Pablo.

Re: [PATCH 0/7] Netfilter fixes for net

2019-08-15 Thread David Miller
From: Pablo Neira Ayuso Date: Wed, 14 Aug 2019 11:24:33 +0200 > This patchset contains Netfilter fixes for net: > > 1) Extend selftest to cover flowtable with ipsec, from Florian Westphal. > > 2) Fix interaction of ipsec with flowtable, also from Florian. > > 3) User-after-free with bound set

Re: [PATCH 0/7] Netfilter fixes for net

2019-01-15 Thread David Miller
From: Pablo Neira Ayuso Date: Mon, 14 Jan 2019 22:29:33 +0100 > This is the first batch of Netfilter fixes for your net tree: > > 1) Fix endless loop in nf_tables rules netlink dump, from Phil Sutter. > > 2) Reference counter leak in object from the error path, from Taehee Yoo. > > 3) Selectiv

Re: [PATCH 0/7] Netfilter fixes for net

2020-10-22 Thread Jakub Kicinski
On Thu, 22 Oct 2020 19:29:18 +0200 Pablo Neira Ayuso wrote: > Hi Jakub, > > The following patchset contains Netfilter fixes for net: > > 1) Update debugging in IPVS tcp protocol handler to make it easier >to understand, from longguang.yue > > 2) Update TCP tracker to deal with keepalive pack