David S. Miller 855404efae
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next ...
Pablo Neira Ayuso says:
====================
netfilter/IPVS updates for net-next
The following patchset contains Netfilter updates for your net-next tree,
they are:
* Add full port randomization support. Some crazy researchers found a way
to reconstruct the secure ephemeral ports that are allocated in random mode
by sending off-path bursts of UDP packets to overrun the socket buffer of
the DNS resolver to trigger retransmissions, then if the timing for the
DNS resolution done by a client is larger than usual, then they conclude
that the port that received the burst of UDP packets is the one that was
opened. It seems a bit aggressive method to me but it seems to work for
them. As a result, Daniel Borkmann and Hannes Frederic Sowa came up with a
new NAT mode to fully randomize ports using prandom.
* Add a new classifier to x_tables based on the socket net_cls set via
cgroups. These includes two patches to prepare the field as requested by
Zefan Li. Also from Daniel Borkmann.
* Use prandom instead of get_random_bytes in several locations of the
netfilter code, from Florian Westphal.
* Allow to use the CTA_MARK_MASK in ctnetlink when mangling the conntrack
mark, also from Florian Westphal.
* Fix compilation warning due to unused variable in IPVS, from Geert
Uytterhoeven.
* Add support for UID/GID via nfnetlink_queue, from Valentina Giusti.
* Add IPComp extension to x_tables, from Fan Du.
====================
Signed-off-by: David S. Miller <davem@davemloft.net >
2014-01-05 20:18:50 -05:00
2013-11-18 15:36:04 -08:00
2013-07-03 16:08:06 -07:00
2013-10-19 23:32:50 +02:00
2013-09-11 15:59:28 -07:00
2013-10-28 10:19:38 -07:00
2013-11-05 17:23:52 +00:00
2009-09-24 07:20:57 -07:00
2013-11-13 12:09:14 +09:00
2012-04-16 14:37:13 +02:00
2013-09-30 14:31:02 -07:00
2013-11-08 09:10:31 -07:00
2012-11-09 18:07:11 +05:30
2011-09-27 18:08:04 +02:00
2014-01-03 23:41:44 +01:00
2013-10-02 16:03:51 -04:00
2013-05-21 10:21:57 -07:00
2013-10-25 22:42:24 +02:00
2013-10-30 01:21:24 +01:00
2012-04-03 13:09:18 +02:00
2013-07-03 16:07:42 -07:00
2013-07-25 12:37:24 +02:00
2013-12-10 16:35:15 -05:00
2013-12-21 15:04:24 +01:00
2013-12-12 11:06:13 -08:00
2013-11-12 15:01:39 +09:00
2013-01-01 11:18:26 -02:00
2013-08-20 12:47:28 +02:00
2013-04-12 14:06:16 +10:00
2013-09-27 09:37:01 +09:00
2012-11-19 14:28:24 +01:00
2013-08-20 12:41:11 +02:00
2013-11-22 08:38:55 -08:00
2012-11-14 15:07:18 -08:00
2013-08-27 10:50:52 +02:00
2011-09-27 18:08:04 +02:00
2013-12-03 13:10:48 +01:00
2013-07-31 10:33:05 +02:00
2013-11-15 16:35:10 -08:00
2013-11-14 18:38:04 +01:00
2012-03-07 16:08:24 +01:00
2013-04-02 09:39:55 -07:00
2012-03-30 16:03:15 -07:00
2012-09-20 16:49:17 -04:00
2013-10-15 23:42:07 -07:00
2013-10-17 21:18:32 +02:00
2012-03-30 16:03:15 -07:00
2013-07-24 22:06:34 -07:00
2013-10-08 23:51:50 +02:00
2013-07-04 11:40:58 -07:00
2013-08-12 17:43:13 -07:00
2013-10-17 14:38:44 +02:00
2013-08-26 17:22:13 -07:00
2013-05-17 15:17:12 +02:00
2010-12-14 22:16:19 +01:00
2012-05-02 00:10:49 -07:00
2013-05-28 12:02:12 +02:00
2013-11-27 11:03:38 -08:00
2011-03-31 11:26:23 -03:00
2013-05-28 12:02:12 +02:00
2013-03-22 12:10:42 -04:00
2009-06-12 18:01:47 +02:00
2013-08-27 10:50:52 +02:00
2013-01-26 22:20:06 -08:00
2010-04-23 02:09:52 +02:00
2013-12-31 16:27:49 -08:00
2013-01-10 01:27:46 +01:00
2013-07-09 22:09:19 +02:00
2013-09-25 15:43:33 -06:00
2010-09-29 17:20:24 +02:00
2013-11-20 13:25:04 -08:00
2013-08-27 14:44:27 +10:00
2013-09-26 09:45:40 -07:00
2012-10-02 21:14:29 +10:00
2011-05-13 16:31:00 -07:00
2013-09-23 16:46:17 -04:00
2013-07-25 12:34:15 +02:00
2013-09-25 10:07:02 -07:00
2013-10-24 17:16:53 +02:00
2013-11-12 14:13:14 +09:00
2013-09-15 17:41:30 -04:00
2013-10-25 17:17:04 -04:00
2013-10-16 13:16:19 -07:00
2010-11-15 18:25:12 +09:00
2013-10-29 11:38:04 +01:00
2013-08-20 12:52:28 +02:00
2013-11-13 12:09:14 +09:00
2013-10-16 13:35:02 -07:00
2013-09-03 09:10:24 -04:00
2013-10-27 21:55:50 +00:00
2013-08-09 10:57:06 -04:00
2013-11-13 12:09:32 +09:00
2013-10-31 13:31:39 +01:00
2011-07-14 17:57:09 -07:00
2013-08-18 07:12:59 -03:00
2013-11-04 10:20:57 +02:00
2013-11-21 16:42:28 -08:00
2013-07-04 11:40:58 -07:00
2013-07-11 21:47:58 +02:00
2009-01-07 10:00:18 -08:00
2013-11-12 10:48:30 +09:00
2013-05-09 01:07:09 -07:00
2013-08-20 12:41:25 +02:00
2010-04-08 11:34:34 +02:00
2013-08-27 10:53:07 +02:00
2006-01-10 08:01:54 -08:00
2013-12-02 11:24:18 +00:00
2013-01-08 14:14:55 -08:00
2008-12-03 16:09:53 -07:00
2005-06-24 00:06:27 -07:00
2013-07-04 11:40:58 -07:00
2010-08-04 15:21:40 +02:00
2009-06-12 18:01:47 +02:00
2008-07-25 10:53:30 -07:00
2009-08-22 14:25:32 -07:00
2008-02-06 10:41:09 -08:00
2011-09-27 18:08:04 +02:00
2013-08-20 12:46:52 +02:00
2013-11-27 20:34:32 -08:00
2010-03-24 16:31:22 -07:00
2013-08-19 12:27:17 -07:00
2013-07-03 22:58:20 +02:00
2013-07-03 16:08:01 -07:00
2013-11-13 12:09:14 +09:00
2007-03-01 14:53:39 -08:00
2013-09-04 12:59:47 +02:00
2012-03-23 16:58:37 -07:00
2005-09-07 16:57:27 -07:00
2008-02-03 15:27:38 +02:00
2009-10-03 09:28:11 +02:00
2011-03-31 11:26:23 -03:00
2013-10-01 16:44:54 +02:00
2011-11-09 12:10:37 +02:00
2013-09-17 15:32:37 +01:00
2013-09-17 15:32:37 +01:00
2013-10-14 15:50:53 +02:00
2013-09-10 11:36:45 +05:30
2006-11-30 04:55:36 +01:00
2012-03-07 16:08:24 +01:00
2013-11-14 11:04:40 -08:00
2012-11-19 14:10:53 +01:00
2013-05-28 12:02:12 +02:00
2012-07-29 21:11:05 -03:00
2013-09-25 12:34:32 +01:00
2012-05-17 19:06:13 -04:00
2011-08-13 18:34:03 -07:00
2011-04-28 16:12:47 -04:00
2009-05-09 07:12:50 +02:00
2013-11-13 12:09:34 +09:00
2008-04-21 15:10:15 -07:00
2013-06-03 14:22:57 -07:00
2013-03-10 18:16:36 +08:00
2013-08-27 10:46:02 +02:00
2010-03-06 11:26:29 -08:00
2012-05-25 16:18:34 +02:00
2013-01-11 11:38:03 -08:00
2009-09-19 09:37:23 -07:00
2008-11-03 18:21:44 +01:00
2013-04-29 15:18:50 +02:00
2013-02-27 19:10:21 -08:00
2013-08-20 12:59:18 +02:00
2012-12-05 23:52:10 +00:00
2006-06-29 10:26:25 -07:00
2011-03-31 11:26:23 -03:00
2007-10-20 02:37:21 +02:00
2013-05-28 12:02:11 +02:00
2011-09-27 18:08:04 +02:00
2013-11-21 19:46:00 -08:00
2013-09-25 06:49:46 -07:00
2013-08-27 10:47:05 +02:00
2011-12-02 16:12:42 +00:00
2012-09-04 16:06:34 -07:00
2010-11-01 15:38:34 -04:00
2012-11-28 18:36:06 +10:00
2010-08-04 15:21:40 +02:00
2009-06-12 18:01:47 +02:00
2011-12-11 10:31:23 -08:00
2013-10-09 08:19:08 +02:00
2012-02-11 15:11:28 +01:00
2009-04-27 12:00:27 -07:00
2009-04-27 12:00:27 -07:00
2013-01-31 19:20:33 -05:00
2012-05-09 13:59:09 -07:00
2012-06-28 12:03:15 +02:00
2013-07-03 09:43:28 +10:00
2013-07-13 12:09:57 -07:00
2013-08-19 21:39:42 -07:00
2013-09-06 09:36:28 -07:00
2012-03-30 16:03:15 -07:00
2013-11-11 12:41:33 +01:00
2009-12-15 08:53:24 -08:00
2012-02-28 16:05:06 +01:00
2011-11-07 07:54:42 +10:30
2010-08-11 08:59:18 -07:00
2007-11-26 19:39:01 -08:00
2012-03-30 16:03:15 -07:00
2012-09-26 19:56:15 +02:00
2013-09-27 17:35:41 -07:00
2006-10-03 23:39:02 +02:00
2013-10-16 15:35:21 +02:00
2010-02-05 12:22:44 +01:00
2013-09-06 09:36:28 -07:00
2013-10-24 10:51:33 +02:00
2012-09-06 22:16:58 -07:00
2012-10-09 16:22:40 +09:00
2012-09-18 12:53:22 +03:00
2011-09-27 18:08:04 +02:00
2009-06-18 13:03:56 -07:00
2006-11-30 05:21:10 +01:00
2013-01-03 15:57:16 -08:00
2013-06-19 12:58:42 +02:00
2006-06-27 17:32:47 -07:00
2013-07-03 16:07:54 -07:00
2008-10-16 11:21:32 -07:00
2011-03-31 11:26:23 -03:00
2006-03-25 08:23:00 -08:00
2009-06-12 18:01:47 +02:00
2012-10-01 15:27:48 +02:00
2012-12-17 17:15:23 -08:00
2013-06-19 12:58:42 +02:00
2011-03-30 12:02:05 +02:00
2012-06-25 12:11:58 -07:00
2012-04-16 14:37:13 +02:00
2013-06-03 14:20:18 -07:00
2011-08-13 18:34:03 -07:00
2013-08-20 12:58:15 +02:00
2013-07-25 12:34:15 +02:00
2013-10-16 13:01:44 -07:00
2013-04-04 10:24:53 -07:00
2013-12-06 16:37:43 -05:00
2006-10-03 22:57:56 +02:00
2013-09-05 16:36:21 -06:00
2012-01-02 13:04:55 +01:00
2006-12-20 01:46:58 -05:00
2012-05-08 16:01:34 -07:00
2010-03-24 16:31:20 -07:00
2013-08-21 10:32:09 -04:00
2013-06-26 12:10:56 +02:00
2011-01-13 08:03:24 -08:00
855404efae
