Authors: Various (see below) Status: Included in stock 2.4.20 kernel This big patch contains all netfilter/iptables changes between stock kernel versions 2.4.19 and 2.4.20. submitted/DSCP.patch + New DSCP target to mangle table (Harald Welte + Matthew G. Marsh) submitted/ECN.patch + New ECN target to mangle table (Harald Welte) submitted/REJECT_mark.patch + Don't copy nfmark value of old packet (Henrik Nordstrom) submitted/ahesp-static.patch + Fix static build of ahesp match (Paul P Komkoff Jr) submitted/conntrack+nat-helper-unregister.patch + Fix helper unregister in case of clashing ports (Harald Welte) submitted/conntrack.patch + Add new 'conntrack' match (Marc Boucher) submitted/dscp.patch + New 'dscp' match (Harald Welte) submitted/ecn.patch + New 'ecn' match (Harald Welte) submitted/helper.patch + New 'helper' match (Martin Josefsson, Harald Welte) submitted/ip6tables-exthdr-bug.patch.ipv6 + Fix broken ipv6 extensionheader parser (Andras Kis-Szabo) submitted/ipv6-agr.patch.ipv6 + New ip6tables 'eui64' match (Andras Kis-Szabo) submitted/length.patch.ipv6 + New ip6tables 'length' match (Imran Patel, James Morris) submitted/log-tunnel-fix.patch.ipv6 + Fix ip6tables 'LOG' target MAC address in case of tunnels (Peter Bieringer, Andras Kis-Szabo) submitted/nat-memoryleak-fix.patch + Fix memoryleak at iptable_nat unload time (zhongyu) submitted/ownercmd.patch + Extend 'owner' match to match cmdline (Marc Boucher) submitted/pkttype.patch + New 'pkttype' match (Michal Ludvig) submitted/ulog-nlgroup-shift-fix.patch + Fix error with shifting nlgroup in ULOG target (Harald Welte) submitted/ulog-sparc-bitops-fix.patch + Include linux/bitops.h instead of asm/bitops.h submitted/z-newnat16.patch + Redesign of conntrack and nat helper framework, for more info see http://cvs.netfilter.org/cgi-bin/cvsweb/netfilter/documentation/newnat-summary.txt (Harald Welte, Jozsef Kadlecsik, and others) submitted/z-newnat_assertfix.patch + Fix erroneously printed ASSERT messages when debugging of newnat enabled (Martin Josefsson) submitted/z-newnat_changeexpect-lockfix.patch + Fix locking bug in ip_conntrack_change_expect() (Martin Josefsson) Further changes, not previuosly in patch-o-matic: + ip6tables usage counter fix (Harald Welte) + ip_queue cleanup (James Morris) + minor spelling fixes + __constant_htons() macro changes + ipt_unclean: srcport _can_ be zero + yet another ipchains GFP_ATOMIC fix