netdev - [PATCH nf-next 0/6] Netfilter updates for net-next

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20220315091513.66544-1-pablo@netfilter.org>
Date:   Tue, 15 Mar 2022 10:15:07 +0100
From:   Pablo Neira Ayuso <pablo@...filter.org>
To:     netfilter-devel@...r.kernel.org
Cc:     davem@...emloft.net, netdev@...r.kernel.org, kuba@...nel.org
Subject: [PATCH nf-next 0/6] Netfilter updates for net-next

Hi,

The following patchset contains Netfilter updates for net-next:

1) Revert CHECKSUM_UNNECESSARY for UDP packet from conntrack.

2) Reject unsupported families when creating tables, from Phil Sutter.

3) GRE support for the flowtable, from Toshiaki Makita.

4) Add GRE offload support for act_ct, also from Toshiaki.

5) Update mlx5 driver to support for GRE flowtable offload,
   from Toshiaki Makita.

6) Oneliner to clean up incorrect indentation in nf_conntrack_bridge,
   from Jiapeng Chong.

Please, pull these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git

Special request of mine: Would it be possible to merge net into net-next?

Many thanks

----------------------------------------------------------------

The following changes since commit ef132dc40a28e07ba10b707b505781ffca46b97f:

  Merge branch 'nfc-llcp-cleanups' (2022-03-03 10:43:37 +0000)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git HEAD

for you to fetch changes up to 334ff12284fc56bdc5af6d310c6381d96906f5a0:

  netfilter: bridge: clean up some inconsistent indenting (2022-03-07 12:42:37 +0100)

----------------------------------------------------------------
Florian Westphal (1):
      Revert "netfilter: conntrack: mark UDP zero checksum as CHECKSUM_UNNECESSARY"

Jiapeng Chong (1):
      netfilter: bridge: clean up some inconsistent indenting

Phil Sutter (1):
      netfilter: nf_tables: Reject tables of unsupported family

Toshiaki Makita (3):
      netfilter: flowtable: Support GRE
      act_ct: Support GRE offload
      net/mlx5: Support GRE conntrack offload

 drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c |  21 ++--
 net/bridge/netfilter/nf_conntrack_bridge.c         |   2 +-
 net/netfilter/nf_conntrack_proto_udp.c             |   4 +-
 net/netfilter/nf_flow_table_core.c                 |  10 +-
 net/netfilter/nf_flow_table_ip.c                   |  62 +++++++++--
 net/netfilter/nf_flow_table_offload.c              |  22 ++--
 net/netfilter/nf_tables_api.c                      |  27 +++++
 net/netfilter/nft_flow_offload.c                   |  13 +++
 net/sched/act_ct.c                                 | 115 ++++++++++++++++-----
 9 files changed, 223 insertions(+), 53 deletions(-)