Hi,
The following patchset contains Netfilter fixes for net:
1) Restore ctnetlink zero mark in events and dump, from Ivan Delalande.
2) Fix deadlock due to missing disabled bh in tproxy, from Florian Westphal.
3) Safer maximum chain load in conntrack, from Eric Dumazet.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git
Thanks.
----------------------------------------------------------------
The following changes since commit 528125268588a18a2f257002af051b62b14bb282:
Merge branch 'nfp-ipsec-csum' (2023-03-03 08:28:44 +0000)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git HEAD
for you to fetch changes up to c77737b736ceb50fdf150434347dbd81ec76dbb1:
netfilter: conntrack: adopt safer max chain length (2023-03-07 10:58:06 +0100)
----------------------------------------------------------------
Eric Dumazet (1):
netfilter: conntrack: adopt safer max chain length
Florian Westphal (1):
netfilter: tproxy: fix deadlock due to missing BH disable
Ivan Delalande (1):
netfilter: ctnetlink: revert to dumping mark regardless of event type
include/net/netfilter/nf_tproxy.h | 7 +++++++
net/ipv4/netfilter/nf_tproxy_ipv4.c | 2 +-
net/ipv6/netfilter/nf_tproxy_ipv6.c | 2 +-
net/netfilter/nf_conntrack_core.c | 4 ++--
net/netfilter/nf_conntrack_netlink.c | 14 +++++++-------
5 files changed, 18 insertions(+), 11 deletions(-)
