Hi, The following patchset contains Netfilter fixes for net: 1) Spurious warning when loading rules using the physdev match, from Todd Seidelmann. 2) Fix FTP conntrack helper debugging output, from Thomas Jarosch. 3) Restore per-netns nf_conntrack_{acct,helper,timeout} sysctl knobs, from Florian Westphal. 4) Clear skbuff timestamp from the flowtable datapath, also from Florian. 5) Fix incorrect byteorder of NFT_META_BRI_IIFVPROTO, from wenxu. You can pull these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Thanks. ---------------------------------------------------------------- The following changes since commit f53a7ad189594a112167efaf17ea8d0242b5ac00: r8152: Set memory to all 0xFFs on failed reg reads (2019-08-25 19:52:59 -0700) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD for you to fetch changes up to daf1de9078792a4d60e36aa7ecf3aadca65277c2: netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorder (2019-08-30 02:49:04 +0200) ---------------------------------------------------------------- Florian Westphal (2): netfilter: conntrack: make sysctls per-namespace again netfilter: nf_flow_table: clear skb tstamp before xmit Thomas Jarosch (1): netfilter: nf_conntrack_ftp: Fix debug output Todd Seidelmann (1): netfilter: xt_physdev: Fix spurious error message in physdev_mt_check wenxu (1): netfilter: nft_meta_bridge: Fix get NFT_META_BRI_IIFVPROTO in network byteorder net/bridge/netfilter/nft_meta_bridge.c | 2 +- net/netfilter/nf_conntrack_ftp.c | 2 +- net/netfilter/nf_conntrack_standalone.c | 5 +++++ net/netfilter/nf_flow_table_ip.c | 3 ++- net/netfilter/xt_physdev.c | 6 ++---- 5 files changed, 11 insertions(+), 7 deletions(-)