[{"id":1765574,"web_url":"http://patchwork.ozlabs.org/comment/1765574/","msgid":"<20170908.113613.678386423137863254.davem@davemloft.net>","list_archive_url":null,"date":"2017-09-08T18:36:13","subject":"Re: [PATCH 0/9] Netfilter/IPVS fixes for net","submitter":{"id":15,"url":"http://patchwork.ozlabs.org/api/people/15/","name":"David Miller","email":"davem@davemloft.net"},"content":"From: Pablo Neira Ayuso \nDate: Fri, 8 Sep 2017 19:45:39 +0200\n\n> The following patchset contains Netfilter/IPVS fixes for your net tree,\n> they are:\n> \n> 1) Fix SCTP connection setup when IPVS module is loaded and any scheduler\n> is registered, from Xin Long.\n> \n> 2) Don't create a SCTP connection from SCTP ABORT packets, also from\n> Xin Long.\n> \n> 3) WARN_ON() and drop packet, instead of BUG_ON() races when calling\n> nf_nat_setup_info(). This is specifically a longstanding problem\n> when br_netfilter with conntrack support is in place, patch from\n> Florian Westphal.\n> \n> 4) Avoid softlock splats via iptables-restore, also from Florian.\n> \n> 5) Revert NAT hashtable conversion to rhashtable, semantics of rhlist\n> are different from our simple NAT hashtable, this has been causing\n> problems in the recent Linux kernel releases. From Florian.\n> \n> 6) Add per-bucket spinlock for NAT hashtable, so at least we restore\n> one of the benefits we got from the previous rhashtable conversion.\n> \n> 7) Fix incorrect hashtable size in memory allocation in xt_hashlimit,\n> from Zhizhou Tian.\n> \n> 8) Fix build/link problems with hashlimit and 32-bit arches, to address\n> recent fallout from a new hashlimit mode, from Vishwanath Pai.\n\nPulled, thanks Pablo.\n--\nTo unsubscribe from this list: send the line \"unsubscribe netfilter-devel\" in\nthe body of a message to majordomo@vger.kernel.org\nMore majordomo info at http://vger.kernel.org/majordomo-info.html","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":"ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=vger.kernel.org\n\t(client-ip=209.132.180.67; helo=vger.kernel.org;\n\tenvelope-from=netfilter-devel-owner@vger.kernel.org;\n\treceiver=)","Received":["from vger.kernel.org (vger.kernel.org [209.132.180.67])\n\tby ozlabs.org (Postfix) with ESMTP id 3xpmJZ6Xq3z9s82\n\tfor ;\n\tSat, 9 Sep 2017 04:37:18 +1000 (AEST)","(majordomo@vger.kernel.org) by vger.kernel.org via listexpand\n\tid S1756859AbdIHShN (ORCPT );\n\tFri, 8 Sep 2017 14:37:13 -0400","from shards.monkeyblade.net ([184.105.139.130]:60462 \"EHLO\n\tshards.monkeyblade.net\" rhost-flags-OK-OK-OK-OK) by vger.kernel.org\n\twith ESMTP id S1756619AbdIHSgO (ORCPT\n\t);\n\tFri, 8 Sep 2017 14:36:14 -0400","from localhost (74-93-104-98-Washington.hfc.comcastbusiness.net\n\t[74.93.104.98]) (using TLSv1 with cipher AES256-SHA (256/256 bits))\n\t(Client did not present a certificate)\n\t(Authenticated sender: davem-davemloft)\n\tby shards.monkeyblade.net (Postfix) with ESMTPSA id 2A024133F6521;\n\tFri, 8 Sep 2017 11:36:14 -0700 (PDT)"],"Date":"Fri, 08 Sep 2017 11:36:13 -0700 (PDT)","Message-Id":"<20170908.113613.678386423137863254.davem@davemloft.net>","To":"pablo@netfilter.org","Cc":"netfilter-devel@vger.kernel.org, netdev@vger.kernel.org","Subject":"Re: [PATCH 0/9] Netfilter/IPVS fixes for net","From":"David Miller ","In-Reply-To":"<1504892748-1605-1-git-send-email-pablo@netfilter.org>","References":"<1504892748-1605-1-git-send-email-pablo@netfilter.org>","X-Mailer":"Mew version 6.7 on Emacs 25.2 / Mule 6.0 (HANACHIRUSATO)","Mime-Version":"1.0","Content-Type":"Text/Plain; charset=us-ascii","Content-Transfer-Encoding":"7bit","X-Greylist":"Sender succeeded SMTP AUTH, not delayed by\n\tmilter-greylist-4.5.12 (shards.monkeyblade.net\n\t[149.20.54.216]); Fri, 08 Sep 2017 11:36:14 -0700 (PDT)","Sender":"netfilter-devel-owner@vger.kernel.org","Precedence":"bulk","List-ID":"","X-Mailing-List":"netfilter-devel@vger.kernel.org"}}]