Hello,
This small batch contains updates for the net-next tree.
First patch, from myself, is a bug fix. The issue (connect timeout) is
ancient, so I think its safe to give this more soak time given the esoteric
conditions needed to trigger this.
Also updates the existing selftest to cover this.
Add netlink extacks when an update references a non-existent
table/chain/set. This allows userspace to provide much better
errors to the user, from Pablo Neira Ayuso.
Last patch adds more policy checks to nf_tables as a better
alternative to the existing runtime checks, from Phil Sutter.
The following changes since commit 19f5eef8bf732406415b44783ea623e3a31c34c9:
MAINTAINERS: Add an obsolete entry for LL TEMAC driver (2023-09-28 15:55:14 +0200)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git tags/nf-next-23-09-28
for you to fetch changes up to 013714bf3e125a218bb02c938ff6df348dda743e:
netfilter: nf_tables: Utilize NLA_POLICY_NESTED_ARRAY (2023-09-28 16:31:29 +0200)
----------------------------------------------------------------
netfilter pull request 2023-09-28
----------------------------------------------------------------
Florian Westphal (2):
netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash
selftests: netfilter: test nat source port clash resolution interaction with tcp early demux
Pablo Neira Ayuso (1):
netfilter: nf_tables: missing extended netlink error in lookup functions
Phil Sutter (1):
netfilter: nf_tables: Utilize NLA_POLICY_NESTED_ARRAY
net/netfilter/nf_nat_proto.c | 64 +++++++++++++++++++++-
net/netfilter/nf_tables_api.c | 43 ++++++++++-----
tools/testing/selftests/netfilter/nf_nat_edemux.sh | 46 +++++++++++++---
3 files changed, 126 insertions(+), 27 deletions(-)
Hello, This small batch contains updates for the net-next tree. First patch, from myself, is a bug fix. The issue (connect timeout) is ancient, so I think its safe to give this more soak time given the esoteric conditions needed to trigger this. Also updates the existing selftest to cover this. Add netlink extacks when an update references a non-existent table/chain/set. This allows userspace to provide much better errors to the user, from Pablo Neira Ayuso. Last patch adds more policy checks to nf_tables as a better alternative to the existing runtime checks, from Phil Sutter. The following changes since commit 19f5eef8bf732406415b44783ea623e3a31c34c9: MAINTAINERS: Add an obsolete entry for LL TEMAC driver (2023-09-28 15:55:14 +0200) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git tags/nf-next-23-09-28 for you to fetch changes up to 013714bf3e125a218bb02c938ff6df348dda743e: netfilter: nf_tables: Utilize NLA_POLICY_NESTED_ARRAY (2023-09-28 16:31:29 +0200) ---------------------------------------------------------------- netfilter pull request 2023-09-28 ---------------------------------------------------------------- Florian Westphal (2): netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash selftests: netfilter: test nat source port clash resolution interaction with tcp early demux Pablo Neira Ayuso (1): netfilter: nf_tables: missing extended netlink error in lookup functions Phil Sutter (1): netfilter: nf_tables: Utilize NLA_POLICY_NESTED_ARRAY net/netfilter/nf_nat_proto.c | 64 +++++++++++++++++++++- net/netfilter/nf_tables_api.c | 43 ++++++++++----- tools/testing/selftests/netfilter/nf_nat_edemux.sh | 46 +++++++++++++--- 3 files changed, 126 insertions(+), 27 deletions(-)