David S. Miller 855404efae
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next ...
Pablo Neira Ayuso says:
====================
netfilter/IPVS updates for net-next
The following patchset contains Netfilter updates for your net-next tree,
they are:
* Add full port randomization support. Some crazy researchers found a way
to reconstruct the secure ephemeral ports that are allocated in random mode
by sending off-path bursts of UDP packets to overrun the socket buffer of
the DNS resolver to trigger retransmissions, then if the timing for the
DNS resolution done by a client is larger than usual, then they conclude
that the port that received the burst of UDP packets is the one that was
opened. It seems a bit aggressive method to me but it seems to work for
them. As a result, Daniel Borkmann and Hannes Frederic Sowa came up with a
new NAT mode to fully randomize ports using prandom.
* Add a new classifier to x_tables based on the socket net_cls set via
cgroups. These includes two patches to prepare the field as requested by
Zefan Li. Also from Daniel Borkmann.
* Use prandom instead of get_random_bytes in several locations of the
netfilter code, from Florian Westphal.
* Allow to use the CTA_MARK_MASK in ctnetlink when mangling the conntrack
mark, also from Florian Westphal.
* Fix compilation warning due to unused variable in IPVS, from Geert
Uytterhoeven.
* Add support for UID/GID via nfnetlink_queue, from Valentina Giusti.
* Add IPComp extension to x_tables, from Fan Du.
====================
Signed-off-by: David S. Miller <davem@davemloft.net >
2014-01-05 20:18:50 -05:00
2013-11-15 16:47:22 -08:00
2014-01-04 20:25:19 -05:00
2013-09-29 21:09:34 +02:00
2013-09-27 09:37:01 +09:00
2013-12-03 13:10:47 +01:00
2013-11-18 15:50:07 -08:00
2013-10-16 19:17:06 +01:00
2013-11-14 08:51:29 +09:00
2013-12-12 18:19:26 -08:00
2013-12-31 14:31:43 -05:00
2013-11-08 14:43:01 -08:00
2013-10-30 20:28:43 -04:00
2013-11-06 23:33:14 -08:00
2014-01-03 23:41:35 +01:00
2013-09-27 17:35:41 -07:00
2013-10-16 15:33:50 +02:00
2014-01-02 03:30:35 -05:00
2013-10-25 15:56:51 -07:00
2013-10-24 11:11:39 +01:00
2013-11-06 07:50:37 +01:00
2013-10-25 09:51:41 +01:00
2013-10-02 15:40:57 -04:00
2013-10-28 15:21:32 -04:00
2013-12-02 15:21:04 -08:00
2013-10-19 23:32:14 +02:00
2013-11-14 23:20:45 +01:00
2013-11-09 00:16:28 -05:00
2013-12-02 11:24:18 +00:00
2013-10-27 08:40:39 -04:00
2013-12-09 15:37:58 -05:00
2013-10-17 13:31:19 -07:00
2013-11-05 11:15:03 -05:00
2013-11-08 08:59:44 -07:00
2013-10-16 01:16:04 +02:00
2013-09-30 14:31:02 -07:00
2013-11-13 15:45:43 +09:00
2013-11-08 09:08:12 -07:00
2013-11-14 13:41:48 +09:00
2013-10-25 11:56:00 +01:00
2013-10-28 13:33:58 -06:00
2013-11-19 09:25:07 -07:00
2013-11-08 09:04:30 -07:00
2014-01-03 23:41:42 +01:00
2013-10-07 23:13:33 -07:00
2013-10-02 11:33:23 +02:00
2013-11-15 09:32:23 +09:00
2013-11-13 15:45:43 +09:00
2013-10-11 07:39:14 +02:00
2013-12-10 15:01:01 -08:00
2013-11-15 09:32:21 +09:00
2013-11-09 00:16:29 -05:00
2013-10-23 10:10:20 -07:00
2013-11-14 13:41:48 +09:00
2013-12-08 01:04:17 +01:00
2013-10-30 01:21:24 +01:00
2013-11-06 12:40:27 +01:00
2013-11-03 23:04:56 -05:00
2013-12-12 10:39:01 -08:00
2013-10-03 16:14:12 -07:00
2013-11-15 16:47:22 -08:00
2013-11-14 23:14:43 +01:00
2013-10-31 14:49:24 +00:00
2013-11-16 12:02:36 +05:30
2013-10-23 10:10:12 -07:00
2013-10-23 10:11:00 -07:00
2013-11-28 20:16:55 +00:00
2013-11-09 00:16:24 -05:00
2013-11-09 00:16:23 -05:00
2013-12-09 20:58:11 -05:00
2013-10-29 09:43:37 +10:30
2013-09-27 09:37:01 +09:00
2013-10-29 12:53:04 +02:00
2013-10-07 15:16:45 -04:00
2013-11-15 22:04:17 -05:00
2013-09-27 18:40:25 +01:00
2013-09-27 18:40:25 +01:00
2013-11-19 16:57:40 +01:00
2013-11-05 17:43:40 -05:00
2013-11-13 12:09:22 +09:00
2013-11-19 16:39:06 -05:00
2013-11-12 15:50:46 +09:00
2013-12-17 14:27:17 -05:00
2013-10-11 17:21:14 +11:00
2013-12-02 21:05:30 +00:00
2013-12-02 21:05:32 +00:00
2013-10-31 09:55:48 +01:00
2013-11-15 09:32:14 +09:00
2013-12-12 18:19:25 -08:00
2013-10-13 16:16:26 -07:00
2013-10-13 16:16:28 -07:00
2013-09-29 18:27:03 -07:00
2013-10-03 22:28:31 +02:00
2013-10-16 18:40:57 -07:00
2013-11-25 20:52:01 +01:00
2014-01-04 20:11:33 -05:00
2014-01-04 20:10:24 -05:00
2013-11-11 00:42:07 -05:00
2013-12-29 16:34:25 -05:00
2013-12-11 14:47:40 -05:00
2013-11-06 12:40:26 +01:00
2013-11-13 12:09:26 +09:00
2013-11-15 09:32:22 +09:00
2013-11-03 10:53:11 -08:00
2013-12-18 17:37:05 -05:00
2013-11-13 16:03:02 +01:00
2013-11-19 19:06:41 +01:00
2013-10-19 19:45:35 -04:00
2013-11-13 17:40:34 +09:00
2013-10-03 18:47:54 +02:00
2013-11-13 12:09:07 +09:00
2013-12-12 18:19:26 -08:00
2013-12-07 14:20:28 -07:00
2013-11-15 09:32:23 +09:00
2013-10-03 18:47:54 +02:00
2013-09-26 16:17:33 -07:00
2013-11-04 10:20:57 +02:00
2013-11-09 00:16:21 -05:00
2013-11-13 12:09:24 +09:00
2013-11-15 09:32:22 +09:00
2013-11-06 12:40:26 +01:00
2013-11-15 09:32:20 +09:00
2013-12-11 15:52:34 +01:00
2013-12-26 13:29:35 -05:00
2013-11-13 12:09:08 +09:00
2013-10-16 21:35:53 -07:00
2013-11-13 12:09:06 +09:00
2013-11-13 12:09:05 +09:00
2013-12-11 13:54:13 -05:00
2013-10-09 12:40:32 +02:00
2013-11-13 15:27:00 +09:00
2013-11-22 08:10:34 -08:00
2013-11-20 14:41:47 -08:00
2013-11-13 12:09:11 +09:00
2013-11-09 00:16:19 -05:00
2013-11-13 12:09:36 +09:00
2013-11-14 11:28:18 -07:00
2013-11-11 12:41:33 +01:00
2013-11-09 00:16:19 -05:00
2013-12-10 21:45:15 -05:00
2013-11-07 19:11:41 -05:00
2014-01-05 20:18:50 -05:00
2013-10-14 17:15:48 +02:00
2014-01-01 23:43:36 -05:00
2013-10-25 19:26:58 -04:00
2013-12-05 13:05:48 -08:00
2013-10-28 15:37:43 -04:00
2013-11-19 16:20:40 -05:00
2013-10-28 15:38:02 -04:00
2013-10-09 20:04:10 -05:00
2013-10-09 20:03:54 -05:00
2013-10-29 18:26:14 -07:00
2013-11-08 10:47:28 -06:00
2013-10-27 16:26:58 -07:00
2013-10-24 11:50:36 +01:00
2013-11-12 16:52:17 +09:00
2013-11-13 12:09:04 +09:00
2013-10-30 12:02:58 +08:00
2013-10-09 14:47:45 +02:00
2013-10-11 17:24:39 +11:00
2013-11-14 11:28:18 -07:00
2013-11-14 23:17:21 +01:00
2013-12-15 11:56:47 -08:00
2013-11-14 11:28:18 -07:00
2013-10-25 11:56:00 +01:00
2013-11-13 15:17:16 +09:00
2013-10-04 10:06:08 +02:00
2014-01-04 19:27:58 -05:00
2013-10-24 23:43:29 -04:00
2013-09-26 16:18:32 -07:00
2013-10-25 22:33:23 +02:00
2013-10-17 00:36:06 +02:00
2013-11-13 20:21:47 +01:00
2013-12-31 13:58:40 -05:00
2013-10-16 09:05:57 +02:00
2013-11-11 14:32:15 -05:00
2013-11-13 12:09:33 +09:00
2013-10-28 13:01:35 -07:00
2013-10-25 19:03:45 -04:00
2013-10-09 16:54:39 -07:00
2013-12-11 15:52:35 +01:00
2013-12-06 12:37:56 -05:00
2013-10-22 22:26:41 +11:00
2013-11-15 09:32:20 +09:00
2013-11-15 22:04:17 -05:00
2013-10-16 13:16:19 -07:00
2013-10-17 16:41:50 -07:00
2013-12-19 19:09:38 -05:00
2013-12-02 11:24:19 +00:00
2013-12-19 14:51:32 -05:00
2013-11-22 08:10:34 -08:00
2013-11-24 11:01:16 -08:00
2013-11-22 08:10:34 -08:00
2013-11-15 09:32:22 +09:00
2014-01-03 20:55:58 -05:00
2013-11-06 09:32:09 +02:00
2013-10-09 12:40:45 +02:00
2013-11-15 09:32:14 +09:00
2013-11-16 12:23:18 -08:00
2013-09-26 15:33:18 -07:00
2013-10-16 13:01:44 -07:00
2013-11-25 13:34:51 -08:00
2013-10-17 14:38:44 +02:00
2013-10-10 12:31:43 -07:00
2013-11-19 16:57:40 +01:00
2013-11-12 10:20:12 +09:00
2013-11-06 12:40:25 +01:00
2013-11-06 20:00:09 +01:00
2013-10-16 13:32:04 -07:00
2013-12-02 11:57:10 -08:00
2013-10-11 15:19:22 +10:00
2013-10-17 10:55:37 +10:30
2013-10-29 11:28:11 +10:30
2013-10-29 11:28:17 +10:30
2013-11-13 12:09:11 +09:00
2013-11-14 15:16:16 +11:00
2013-11-13 12:09:07 +09:00
2013-10-17 15:53:09 -04:00
855404efae