1. 10 Aug, 2015 3 commits
  2. 07 Aug, 2015 1 commit
  3. 06 Aug, 2015 20 commits
  4. 05 Aug, 2015 1 commit
    • David S. Miller's avatar
      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next · 9dc20a64
      David S. Miller authored
      Pablo Neira Ayuso says:
      
      ====================
      Netfilter updates for net-next
      
      The following patchset contains Netfilter updates for net-next, they are:
      
      1) A couple of cleanups for the netfilter core hook from Eric Biederman.
      
      2) Net namespace hook registration, also from Eric. This adds a dependency with
         the rtnl_lock. This should be fine by now but we have to keep an eye on this
         because if we ever get the per-subsys nfnl_lock before rtnl we have may
         problems in the future. But we have room to remove this in the future by
         propagating the complexity to the clients, by registering hooks for the init
         netns functions.
      
      3) Update nf_tables to use the new net namespace hook infrastructure, also from
         Eric.
      
      4) Three patches to refine and to address problems from the new net namespace
         hook infrastructure.
      
      5) Switch to alternate jumpstack in xtables iff the packet is reentering. This
         only applies to a very special case, the TEE target, but Eric Dumazet
         reports that this is slowing down things for everyone else. So let's only
         switch to the alternate jumpstack if the tee target is in used through a
         static key. This batch also comes with offline precalculation of the
         jumpstack based on the callchain depth. From Florian Westphal.
      
      6) Minimal SCTP multihoming support for our conntrack helper, from Michal
         Kubecek.
      
      7) Reduce nf_bridge_info per skbuff scratchpad area to 32 bytes, from Florian
         Westphal.
      
      8) Fix several checkpatch errors in bridge netfilter, from Bernhard Thaler.
      
      9) Get rid of useless debug message in ip6t_REJECT, from Subash Abhinov.
      ====================
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      9dc20a64
  5. 04 Aug, 2015 15 commits