Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

Pablo Neira Ayuso says:

====================
Netfilter updates for net-next

The following patchset contains Netfilter/IPVS updates for your net-next tree.
In sum, patches to address fallout from the previous round plus updates from
the IPVS folks via Simon Horman, they are:

1) Add a new scheduler to IPVS: The weighted overflow scheduling algorithm
   directs network connections to the server with the highest weight that is
   currently available and overflows to the next when active connections exceed
   the node's weight. From Raducu Deaconu.

2) Fix locking ordering in IPVS, always take rtnl_lock in first place. Patch
   from Julian Anastasov.

3) Allow to indicate the MTU to the IPVS in-kernel state sync daemon. From
   Julian Anastasov.

4) Enhance multicast configuration for the IPVS state sync daemon. Also from
   Julian.

5) Resolve sparse warnings in the nf_dup modules.

6) Fix a linking problem when CONFIG_NF_DUP_IPV6 is not set.

7) Add ICMP codes 5 and 6 to IPv6 REJECT target, they are more informative
   subsets of code 1. From Andreas Herz.

8) Revert the jumpstack size calculation from mark_source_chains due to chain
   depth miscalculations, from Florian Westphal.

9) Calm down more sparse warning around the Netfilter tree, again from Florian
   Westphal.
====================

Signed-off-by: David S. Miller <davem@davemloft.net>

2 files changed, 8 insertions, 1 deletions

diff --git a/include/uapi/linux/ip_vs.h b/include/uapi/linux/ip_vs.h
index 3199243f2028..391395c06c7e 100644
--- a/include/uapi/linux/ip_vs.h
+++ b/include/uapi/linux/ip_vs.h
@@ -406,6 +406,11 @@ enum {
         IPVS_DAEMON_ATTR_STATE,         /* sync daemon state (master/backup) */
         IPVS_DAEMON_ATTR_MCAST_IFN,     /* multicast interface name */
         IPVS_DAEMON_ATTR_SYNC_ID,       /* SyncID we belong to */
+        IPVS_DAEMON_ATTR_SYNC_MAXLEN,   /* UDP Payload Size */
+        IPVS_DAEMON_ATTR_MCAST_GROUP,   /* IPv4 Multicast Address */
+        IPVS_DAEMON_ATTR_MCAST_GROUP6,  /* IPv6 Multicast Address */
+        IPVS_DAEMON_ATTR_MCAST_PORT,    /* Multicast Port (base) */
+        IPVS_DAEMON_ATTR_MCAST_TTL,     /* Multicast TTL */
         __IPVS_DAEMON_ATTR_MAX,
 };
 
diff --git a/include/uapi/linux/netfilter_ipv6/ip6t_REJECT.h b/include/uapi/linux/netfilter_ipv6/ip6t_REJECT.h
index 205ed62e4605..cd2e940c8bf5 100644
--- a/include/uapi/linux/netfilter_ipv6/ip6t_REJECT.h
+++ b/include/uapi/linux/netfilter_ipv6/ip6t_REJECT.h
@@ -10,7 +10,9 @@ enum ip6t_reject_with {
         IP6T_ICMP6_ADDR_UNREACH,
         IP6T_ICMP6_PORT_UNREACH,
         IP6T_ICMP6_ECHOREPLY,
-        IP6T_TCP_RESET
+        IP6T_TCP_RESET,
+        IP6T_ICMP6_POLICY_FAIL,
+        IP6T_ICMP6_REJECT_ROUTE
 };
 
 struct ip6t_reject_info {