Hi David,
The following patchset contains Netfilter updates for your net tree,
they are:
1) Dump only conntrack that belong to this namespace via /proc file.
This is some fallout from the conversion to single conntrack table
for all netns, patch from Liping Zhang.
2) Missing MODULE_ALIAS_NF_LOGGER() for the ARP family that prevents
module autoloading, also from Liping Zhang.
3) Report overquota event to the right netnamespace, again from Liping.
4) Fix tproxy listener sk refcount that leads to crash, from
Eric Dumazet.
5) Fix racy refcounting on object deletion from nfnetlink and rule
removal both for nfacct and cttimeout, from Liping Zhang.
You can pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Thanks!
----------------------------------------------------------------
The following changes since commit a1560dd7a47f983419760aa7f6a481e3b910b54b:
Merge branch 'mediatek-fixes' (2016-08-15 23:02:45 -0700)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD
for you to fetch changes up to b75911b66ad508a3c3f006ce37d9f9ebee34da43:
netfilter: cttimeout: fix use after free error when delete netns (2016-08-18 15:17:00 +0200)
----------------------------------------------------------------
Eric Dumazet (1):
netfilter: tproxy: properly refcount tcp listeners
Liping Zhang (5):
netfilter: conntrack: do not dump other netns's conntrack entries via proc
netfilter: nfnetlink_log: add "nf-logger-3-1" module alias name
netfilter: nfnetlink_acct: report overquota to the right netns
netfilter: nfnetlink_acct: fix race between nfacct del and xt_nfacct destroy
netfilter: cttimeout: fix use after free error when delete netns
include/linux/netfilter/nfnetlink_acct.h | 4 ++--
net/netfilter/nf_conntrack_standalone.c | 4 ++++
net/netfilter/nfnetlink_acct.c | 17 +++++++++--------
net/netfilter/nfnetlink_cttimeout.c | 16 ++++++++++------
net/netfilter/nfnetlink_log.c | 1 +
net/netfilter/xt_TPROXY.c | 4 ++++
net/netfilter/xt_nfacct.c | 2 +-
7 files changed, 31 insertions(+), 17 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
