Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6

diff --cc net/bridge/br_netfilter.c
index 84060bc48f11b86f6d09220c7ca5ec5dd1026843,f1d49ae234117b9fa0b933391ffd036257eeb88f..9fdf1b116bd733ad764d3aff542a8ea6768597ff
--- 1/net/bridge/br_netfilter.c
--- 2/net/bridge/br_netfilter.c
+++ b/net/bridge/br_netfilter.c
@@@ -550,12 -554,16 +555,16 @@@ static unsigned int br_nf_pre_routing(u
        if (unlikely(!pskb_may_pull(skb, len)))
                goto out;
  
 -      p = rcu_dereference(in->br_port);
++      p = br_port_get_rcu(in);
+       if (p == NULL)
+               goto out;
+       br = p->br;
+ 
        if (skb->protocol == htons(ETH_P_IPV6) || IS_VLAN_IPV6(skb) ||
            IS_PPPOE_IPV6(skb)) {
- #ifdef CONFIG_SYSCTL
-               if (!brnf_call_ip6tables)
+               if (!brnf_call_ip6tables && !br->nf_call_ip6tables)
                        return NF_ACCEPT;
- #endif
+ 
                nf_bridge_pull_encap_header_rcsum(skb);
                return br_nf_pre_routing_ipv6(hook, skb, in, out, okfn);
        }
@@@ -715,12 -722,17 +723,17 @@@ static unsigned int br_nf_forward_arp(u
                                      const struct net_device *out,
                                      int (*okfn)(struct sk_buff *))
  {
+       struct net_bridge_port *p;
+       struct net_bridge *br;
        struct net_device **d = (struct net_device **)(skb->cb);
  
- #ifdef CONFIG_SYSCTL
-       if (!brnf_call_arptables)
 -      p = rcu_dereference(out->br_port);
++      p = br_port_get_rcu(out);
+       if (p == NULL)
+               return NF_ACCEPT;
+       br = p->br;
+ 
+       if (!brnf_call_arptables && !br->nf_call_arptables)
                return NF_ACCEPT;
- #endif
  
        if (skb->protocol != htons(ETH_P_ARP)) {
                if (!IS_VLAN_ARP(skb))

diff --cc net/bridge/br_private.h
Simple merge

diff --cc net/netfilter/ipvs/ip_vs_conn.c
Simple merge