From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Date: Mon, 9 Jul 2018 19:18:58 +0200 > The following patchset contains Netfilter fixes for your net tree: > > 1) Missing module autoloadfor icmp and icmpv6 x_tables matches, > from Florian Westphal. > > 2) Possible non-linear access to TCP header from tproxy, from > Mate Eckl. > > 3) Do not allow rbtree to be used for single elements, this patch > moves all set backend into one single module since such thing > can only happen if hashtable module is explicitly blacklisted, > which should not ever be done. > > 4) Reject error and standard targets from nft_compat for sanity > reasons, they are never used from there. > > 5) Don't crash on double hashsize module parameter, from Andrey > Ryabinin. > > 6) Drop dst on skb before placing it in the fragmentation > reassembly queue, from Florian Westphal. > > You can pull these changes from: > > git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Pulled, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
