Re: [PATCH 2/10] [SKBUFF]: Add skb_morph

From: Herbert Xu <[EMAIL PROTECTED]> > On Mon, Nov 26, 2007 at 03:50:22PM +0900, Yasuyuki KOZAKAI wrote: > > > > The refcount of nfct is leaked by this function. As a result, > > nf_conntrack_ipv6.ko cannot be unloaded after doing "ping6 -s 2000 ..." . &

Re: [PATCH 2/10] [SKBUFF]: Add skb_morph

ipv6.ko cannot be unloaded after doing "ping6 -s 2000 ..." . dst->dst and dst->secpath are also needed to be released, I think. Please consider to apply this patch. Regards, -- Yasuyuki Kozakai >From a876e48dfed87dd564a352509c74e572b09bed7d Mon Sep 17 00:00:00 2001 From:

Re: [PATCH 2.6.23-rc1][NETFILTER] nf_conntrack_reasm: adding icmpv6_send code(TIME EXCEEDED).

te: unlike IPv4, fragmentation in IPv6 is performed only by source nodes, not by routers along a packet's delivery path -- see section 5.) This means that IPv6 router doesn't send Too Big error for forwarded packets. At least it's better to be configurable if people want to do

Re: [PATCH][v2] Netfilter Kconfig: Expose IPv4/6 connection tracking options by selecting NF_CONNTRACK_ENABLED

ecause it is purely new feature. BTW, it's too late to restore IP_NF_CONNTRACK in stable and current tree for a while ? -- Yasuyuki Kozakai - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: [patch 2/8] Make some network-related proc files use seq_list_xxx helpers

make: *** [.tmp_vmlinux1] Error 1 -- Yasuyuki Kozakai From: David Miller <[EMAIL PROTECTED]> Date: Mon, 09 Jul 2007 13:15:23 -0700 (PDT) > From: [EMAIL PROTECTED] > Date: Mon, 09 Jul 2007 11:51:10 -0700 > > > From: Pavel Emelianov <[EMAIL PROTECTED]> > > > &

[IPROUTE]: Fix symbolic link to tc-bfifo.8

tc-pbfifo.8 does not exist because it was moved to tc-bfifo.8. Signed-off-by: Yasuyuki Kozakai <[EMAIL PROTECTED]> --- Makefile |3 +-- 1 files changed, 1 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index dbcb249..af0d5e4 100644 --- a/Makefile +++ b/Makefile @@

Re: [NETFILTER]: x_tables: replace IPv4 dscp match by address family independent version

rror in 'make headers_check': > > linux/netfilter_ipv4/ipt_DSCP.h requires linux/netfilter/xt_DSCP.h, > which does not exist in exported headers > make[4]: *** [ipt_DSCP.h] Error 1 > > Please remember to run 'make headers_check' before submitting patche

Re: [PATCH] [NETFILTER] nf_conntrack: clean up to reduce size of 'struct nf_conn'

20 bytes in order to fit into to > target of 256bytes. > > Signed-off-by: Harald Welte <[EMAIL PROTECTED]> This patch seems not to include fixes I pointed out and you said "fixed". Please confirm if you really sent the intended one. Regards, -- Yasuyuki Kozakai - To uns

Re: [PATCH 00/13]: Netfilter IPsec support

;t comment :) > > View the net-2.6.16 GIT tree as a sort of playpen, much like > -mm, until we get close to the real 2.6.16 upstream development > openning up. > > I rebase all the time, and I can pluck out and change patches > at will. Then I agree. It can increase the number

Re: [PATCH 06/13]: [IPV4/6]: Netfilter IPsec input hooks

ver_finish()/ip6_input_finish() can > > continue to process extension headers after ESP/AH in ordinary case. > > AFAICT statistics are not affected by my patches, except for the > iptables counters. The double parsing of extension headers is indeed > a problem I forgot about, it looks lik

Re: [PATCH 06/13]: [IPV4/6]: Netfilter IPsec input hooks

_finish()/ip6_input_finish() can continue to process extension headers after ESP/AH in ordinary case. In special case, if some codes mangle IPv6 addresses, that's the codes to take care of the possibility of re-visiting ip6_input_finish(). What do you think ? # Please note that these are just m

Re: build bug: ipt_CONNMARK.c: undefined reference to `need_ip_conntrack'

2]: *** [.tmp_vmlinux1] Error 1 > > Last merged Linus' git: b286e39207237e2f6929959372bf66d9a8d05a82 > (i.e., current 2.6.15rc1+). Thanks for report. Could you check this patch ? Signed-off-by: Yasuyuki Kozakai <[EMAIL PROTECTED]> -- Yasuyuki Kozakai [NETFILTER] fixed dep

[PATCH] [IPV4,IPV6] replace handmade list with hlist in IPv{4,6} reassembly

Hi, [IPV4,IPV6] replace handmade list with hlist in IPv{4,6} reassembly Both of ipq and frag_queue have *next and **prev, and they can be replaced with hlist. Thanks Arnaldo Carvalho de Melo for the suggestion. Signed-off-by: Yasuyuki Kozakai <[EMAIL PROTECTED]> ---

Re: [NF+IPsec 4/6]: Make IPsec input processing symetrical to output

ed out. Then our suggestion is adding new hook with new name, and distinguishing cleary between the usage of new and current hook. BTW, tunnel mode is special case. We can avoid confusing by operation and so on. For example, using different address for inner and outer header. We agree to call n

[ANNOUNCE] USAGI STABLE release 6

Hi, all, We are glad to announce the USAGI STABLE RELEASE 6, dated on July 14th, 2005. The kernel in this release is based on linux-2.6.10 and was approved by IPv6 Forum in IPv6 Ready Logo Phase-1 Program . Improvements in this release are: * based on linux-2.6.10, *