[PATCH v2] ipv6: Preserve link scope traffic original oif

2018-11-21 Thread Alin Nastac
When ip6_route_me_harder is invoked, it resets outgoing interface of: - link-local scoped packets sent by neighbor discovery - multicast packets sent by MLD host - multicast packets send by MLD proxy daemon that sets outgoing interface through IPV6_PKTINFO ipi6_ifindex Link-local and mul

Re: [PATCH v2] ipv6: Preserve link scope traffic original oif

2018-11-21 Thread Pablo Neira Ayuso
On Wed, Nov 21, 2018 at 12:17:50PM +0100, Alin Nastac wrote: > When ip6_route_me_harder is invoked, it resets outgoing interface of: > - link-local scoped packets sent by neighbor discovery > - multicast packets sent by MLD host > - multicast packets send by MLD proxy daemon that sets outgoin

Re: [PATCH v2] ipv6: Preserve link scope traffic original oif

2018-11-21 Thread Pablo Neira Ayuso
On Wed, Nov 21, 2018 at 01:24:25PM +0100, Pablo Neira Ayuso wrote: > On Wed, Nov 21, 2018 at 12:17:50PM +0100, Alin Nastac wrote: > > When ip6_route_me_harder is invoked, it resets outgoing interface of: > > - link-local scoped packets sent by neighbor discovery > > - multicast packets sent by

[PATCH nf] netfilter: nfnetlink_cttimeout: nf_proto_net must be first member of netns_proto_gre

2018-11-21 Thread Florian Westphal
Can't move timeouts around, it appears conntrack sysctl unregister assumes net_generic() returns nf_proto_net, so we get crash. Expose layout of netns_proto_gre instead. Reported-by: kernel test robot Fixes: 991acf532b netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too Sig

[PATCH v2] ipv6: Preserve link scope traffic original oif

2018-11-21 Thread Alin Nastac
When ip6_route_me_harder is invoked, it resets outgoing interface of: - link-local scoped packets sent by neighbor discovery - multicast packets sent by MLD host - multicast packets send by MLD proxy daemon that sets outgoing interface through IPV6_PKTINFO ipi6_ifindex Link-local and mul

[PATCH] netfilter: ipset: replace a strncpy() with strscpy()

2018-11-21 Thread Qian Cai
To make overflows as obvious as possible and to prevent code from blithely proceeding with a truncated string. This also has a side-effect to fix a compilation warning using GCC 8.2.1. net/netfilter/ipset/ip_set_core.c: In function 'ip_set_sockfn_get': net/netfilter/ipset/ip_set_core.c:2027:3: war