iptables branch, master, updated. v1.4.11.1-1-g3b7a22b

[Patrick McHardy]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "iptables".

The branch, master has been updated
       via  3b7a22b44d74b9b05d5e4b0529ebf72c49dcbff5 (commit)
      from  c960bde4a82792c285110589cf8b2cf1438e1b8f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 3b7a22b44d74b9b05d5e4b0529ebf72c49dcbff5
Author: Fernando Luis Vazquez Cao <fernando at oss.ntt.co.jp>
Date:   Fri Jun 17 05:46:22 2011 +0200

    doc: document IPv6 TOS mangling bug in old Linux kernels
    
    In Linux kernels up to and including 2.6.38, with the exception of longterm
    releases 2.6.32.42 (or later) and 2.6.33.15 (or later), there is a bug (*) whereby
    IPv6 TOS mangling does not behave as documented and differs from the IPv4
    version. The TOS mask indicates the bits one wants to zero out, so it needs to
    be inverted before applying it to the original TOS field. However, the
    aformentioned kernels forgo the inversion which breaks --set-tos and its
    mnemonics.
    
    (*) Fixed by upstream commit:
        1ed2f73d90fb49bcf5704aee7e9084adb882bfc5 (netfilter: IPv6: fix DSCP mangle code)
    
    Signed-off-by: Fernando Luis Vazquez Cao <fernando at oss.ntt.co.jp>
    Signed-off-by: Patrick McHardy <kaber at trash.net>

-----------------------------------------------------------------------

Summary of changes:
 extensions/libxt_TOS.man |   23 ++++++++++++++++-------
 1 files changed, 16 insertions(+), 7 deletions(-)


hooks/post-receive
-- 
iptables