[PATCH 2.4 0/18]: Netfilter resync with 2.6

[Patrick McHardy]

Hi Dave,

the following 18 patches resync netfilter in 2.4 with 2.6.
They contains the ICMP+NAT fixes, Yasuyuki's IPv6 fixes
and two misc. fixes.

You can pull all changes from bk://212.42.230.204/nf-2.4

Regards
Patrick


Patrick McHardy:
   o Merge coreworks.de:/home/kaber/src/nf/nf-2.4-misc into 
coreworks.de:/home/kaber/src/nf/nf-2.4
   o Merge coreworks.de:/home/kaber/src/nf/nf-2.4-nat into 
coreworks.de:/home/kaber/src/nf/nf-2.4
   o Merge coreworks.de:/home/kaber/src/nf/nf-2.4-ip6tables into 
coreworks.de:/home/kaber/src/nf/nf-2.4
   o [NETFILTER]: Fix stack leakage in iptables/ip6_tables
   o [NETFILTER]: Release dst_entry in PRE_ROUTING after NAT
   o [NETFILTER]: Verify NAT manips have been applied before reversing 
them in icmp_reply_translation
   o [NETFILTER]: Apply PRE_ROUTING manips in LOCAL_OUT for locally 
generated icmp errors
   o [NETFILTER]: Save a level of indentation in icmp_reply_translation
   o [NETFILTER]: Remove CONFIG_IP_NF_NAT_LOCAL config option
   o [NETFILTER]: Associate locally generated ICMP errors with conntrack 
of original packet
 

Phil Oester:
   o [NETFILTER]: revert MASQUERADE optimization for mostly static IPs
 

Yasuyuki Kozakai:
   o [NETFILTER]: Backport fixes for ip6tables
   o [NETFILTER]: Backport fixes for ip6t_rt
   o [NETFILTER]: Backport fixes for ip6t_multiport
   o [NETFILTER]: Backport fixes for ip6t_ipv6header
   o [NETFILTER]: Backport fixes for ip6t_hbh
   o [NETFILTER]: Backport fixes for ip6t_frag
   o [NETFILTER]: Backport fixes for ip6t_eui64
   o [NETFILTER]: Fix check for ESP header size in ip6t_esp
   o [NETFILTER]: Backport fixes for ip6t_dst
   o [NETFILTER]: Backport fixes for ip6t_LOG