| /net/netfilter/ |
| D | utils.c | 10 __sum16 nf_ip_checksum(struct sk_buff *skb, unsigned int hook, in nf_ip_checksum() argument
18 if (hook != NF_INET_PRE_ROUTING && hook != NF_INET_LOCAL_IN) in nf_ip_checksum()
43 static __sum16 nf_ip_checksum_partial(struct sk_buff *skb, unsigned int hook, in nf_ip_checksum_partial() argument
53 return nf_ip_checksum(skb, hook, dataoff, protocol); in nf_ip_checksum_partial()
64 __sum16 nf_ip6_checksum(struct sk_buff *skb, unsigned int hook, in nf_ip6_checksum() argument
72 if (hook != NF_INET_PRE_ROUTING && hook != NF_INET_LOCAL_IN) in nf_ip6_checksum()
97 static __sum16 nf_ip6_checksum_partial(struct sk_buff *skb, unsigned int hook, in nf_ip6_checksum_partial() argument
108 return nf_ip6_checksum(skb, hook, dataoff, protocol); in nf_ip6_checksum_partial()
123 __sum16 nf_checksum(struct sk_buff *skb, unsigned int hook, in nf_checksum() argument
131 csum = nf_ip_checksum(skb, hook, dataoff, protocol); in nf_checksum()
[all …]
|
| D | nf_queue.c | 134 if (entry->state.hook == NF_INET_LOCAL_OUT) { in nf_ip_saveroute()
149 if (entry->state.hook == NF_INET_LOCAL_OUT) { in nf_ip6_saveroute()
252 const struct nf_hook_entry *hook; in nf_iterate() local
256 hook = &hooks->hooks[i]; in nf_iterate()
258 verdict = nf_hook_entry_hookfn(hook, skb, state); in nf_iterate()
305 hooks = nf_hook_entries_head(net, pf, entry->state.hook); in nf_reinject()
|
| D | nf_conntrack_proto.c | 208 .hook = ipv4_conntrack_in,
214 .hook = ipv4_conntrack_local,
220 .hook = ipv4_confirm,
226 .hook = ipv4_confirm,
403 .hook = ipv6_conntrack_in,
409 .hook = ipv6_conntrack_local,
415 .hook = ipv6_confirm,
421 .hook = ipv6_confirm,
|
| D | nf_conntrack_proto_udp.c | 74 if (state->hook == NF_INET_PRE_ROUTING && in udp_error()
76 nf_checksum(skb, state->hook, dataoff, IPPROTO_UDP, state->pf)) { in udp_error()
165 if (state->hook == NF_INET_PRE_ROUTING && in udplite_error()
167 nf_checksum_partial(skb, state->hook, dataoff, cscov, IPPROTO_UDP, in udplite_error()
|
| D | nf_nat_proto.c | 640 state->hook)) in nf_nat_ipv4_fn()
741 .hook = nf_nat_ipv4_in,
748 .hook = nf_nat_ipv4_out,
755 .hook = nf_nat_ipv4_local_fn,
762 .hook = nf_nat_ipv4_fn,
876 state->hook, in nf_nat_ipv6_fn()
980 .hook = nf_nat_ipv6_in,
987 .hook = nf_nat_ipv6_out,
994 .hook = nf_nat_ipv6_local_fn,
1001 .hook = nf_nat_ipv6_fn,
|
| D | core.c | 99 .hook = accept_all,
148 new->hooks[nhooks].hook = reg->hook; in nf_hook_entries_grow()
157 new->hooks[nhooks].hook = reg->hook; in nf_hook_entries_grow()
378 WRITE_ONCE(old->hooks[i].hook, accept_all); in nf_remove_net_hook()
|
| /net/ipv4/netfilter/ |
| D | ipt_REJECT.c | 34 int hook = xt_hooknum(par); in reject_tg() local
38 nf_send_unreach(skb, ICMP_NET_UNREACH, hook); in reject_tg()
41 nf_send_unreach(skb, ICMP_HOST_UNREACH, hook); in reject_tg()
44 nf_send_unreach(skb, ICMP_PROT_UNREACH, hook); in reject_tg()
47 nf_send_unreach(skb, ICMP_PORT_UNREACH, hook); in reject_tg()
50 nf_send_unreach(skb, ICMP_NET_ANO, hook); in reject_tg()
53 nf_send_unreach(skb, ICMP_HOST_ANO, hook); in reject_tg()
56 nf_send_unreach(skb, ICMP_PKT_FILTERED, hook); in reject_tg()
59 nf_send_reset(xt_net(par), skb, hook); in reject_tg()
|
| D | nf_reject_ipv4.c | 16 struct tcphdr *_oth, int hook) in nf_reject_ip_tcphdr_get() argument
37 if (nf_ip_checksum(oldskb, hook, ip_hdrlen(oldskb), IPPROTO_TCP)) in nf_reject_ip_tcphdr_get()
100 void nf_send_reset(struct net *net, struct sk_buff *oldskb, int hook) in nf_send_reset() argument
108 oth = nf_reject_ip_tcphdr_get(oldskb, &_oth, hook); in nf_send_reset()
170 void nf_send_unreach(struct sk_buff *skb_in, int code, int hook) in nf_send_unreach() argument
183 if (nf_ip_checksum(skb_in, hook, ip_hdrlen(skb_in), proto) == 0) in nf_send_unreach()
|
| D | iptable_nat.c | 38 .hook = iptable_nat_do_chain,
44 .hook = iptable_nat_do_chain,
50 .hook = iptable_nat_do_chain,
56 .hook = iptable_nat_do_chain,
|
| D | nf_defrag_ipv4.c | 84 nf_ct_defrag_user(state->hook, skb); in ipv4_conntrack_defrag()
94 .hook = ipv4_conntrack_defrag,
100 .hook = ipv4_conntrack_defrag,
|
| D | ip_tables.c | 189 unsigned int hook, in trace_packet() argument
201 root = get_entry(private->entries, private->hook_entry[hook]); in trace_packet()
203 hookname = chainname = hooknames[hook]; in trace_packet()
206 xt_entry_foreach(iter, root, private->size - private->hook_entry[hook]) in trace_packet()
211 nf_log_trace(net, AF_INET, hook, skb, in, out, &trace_loginfo, in trace_packet()
229 unsigned int hook = state->hook; in ipt_do_table() local
258 WARN_ON(!(table->valid_hooks & (1 << hook))); in ipt_do_table()
276 e = get_entry(table_base, private->hook_entry[hook]); in ipt_do_table()
307 trace_packet(state->net, skb, hook, state->in, in ipt_do_table()
323 private->underflow[hook]); in ipt_do_table()
[all …]
|
| D | arp_tables.c | 186 unsigned int hook = state->hook; in arpt_do_table() local
214 e = get_entry(table_base, private->hook_entry[hook]); in arpt_do_table()
247 private->underflow[hook]); in arpt_do_table()
305 unsigned int hook; in mark_source_chains() local
310 for (hook = 0; hook < NF_ARP_NUMHOOKS; hook++) { in mark_source_chains()
311 unsigned int pos = newinfo->hook_entry[hook]; in mark_source_chains()
314 if (!(valid_hooks & (1 << hook))) in mark_source_chains()
323 int visited = e->comefrom & (1 << hook); in mark_source_chains()
329 |= ((1 << hook) | (1 << NF_ARP_NUMHOOKS)); in mark_source_chains()
|
| D | nf_flow_table_ipv4.c | 13 .hook = nf_flow_offload_ip_hook,
|
| /net/bridge/netfilter/ |
| D | nft_reject_bridge.c | 66 int hook) in nft_reject_br_send_v4_tcp_reset() argument
76 oth = nf_reject_ip_tcphdr_get(oldskb, &_oth, hook); in nft_reject_br_send_v4_tcp_reset()
100 int hook, u8 code) in nft_reject_br_send_v4_unreach() argument
129 nf_ip_checksum(oldskb, hook, ip_hdrlen(oldskb), proto)) in nft_reject_br_send_v4_unreach()
181 int hook) in nft_reject_br_send_v6_tcp_reset() argument
192 oth = nf_reject_ip6_tcphdr_get(oldskb, &_oth, &otcplen, hook); in nft_reject_br_send_v6_tcp_reset()
212 static bool reject6_br_csum_ok(struct sk_buff *skb, int hook) in reject6_br_csum_ok() argument
234 return nf_ip6_checksum(skb, hook, thoff, proto) == 0; in reject6_br_csum_ok()
240 int hook, u8 code) in nft_reject_br_send_v6_unreach() argument
258 if (!reject6_br_csum_ok(oldskb, hook)) in nft_reject_br_send_v6_unreach()
|
| D | ebtable_nat.c | 77 .hook = ebt_nat_out,
83 .hook = ebt_nat_out,
89 .hook = ebt_nat_in,
|
| D | ebtable_filter.c | 77 .hook = ebt_in_hook,
83 .hook = ebt_in_hook,
89 .hook = ebt_out_hook,
|
| /net/ipv6/netfilter/ |
| D | ip6table_nat.c | 40 .hook = ip6table_nat_do_chain,
46 .hook = ip6table_nat_do_chain,
52 .hook = ip6table_nat_do_chain,
58 .hook = ip6table_nat_do_chain,
|
| D | nf_reject_ipv6.c | 17 unsigned int *otcplen, int hook) in nf_reject_ip6_tcphdr_get() argument
54 if (nf_ip6_checksum(oldskb, hook, tcphoff, IPPROTO_TCP)) { in nf_reject_ip6_tcphdr_get()
129 void nf_send_reset6(struct net *net, struct sk_buff *oldskb, int hook) in nf_send_reset6() argument
147 otcph = nf_reject_ip6_tcphdr_get(oldskb, &_otcph, &otcplen, hook); in nf_send_reset6()
217 static bool reject6_csum_ok(struct sk_buff *skb, int hook) in reject6_csum_ok() argument
236 return nf_ip6_checksum(skb, hook, thoff, proto) == 0; in reject6_csum_ok()
|
| D | nf_defrag_ipv6_hooks.c | 67 nf_ct6_defrag_user(state->hook, skb)); in ipv6_defrag()
77 .hook = ipv6_defrag,
83 .hook = ipv6_defrag,
|
| D | ip6_tables.c | 214 unsigned int hook, in trace_packet() argument
226 root = get_entry(private->entries, private->hook_entry[hook]); in trace_packet()
228 hookname = chainname = hooknames[hook]; in trace_packet()
231 xt_entry_foreach(iter, root, private->size - private->hook_entry[hook]) in trace_packet()
236 nf_log_trace(net, AF_INET6, hook, skb, in, out, &trace_loginfo, in trace_packet()
254 unsigned int hook = state->hook; in ip6t_do_table() local
279 WARN_ON(!(table->valid_hooks & (1 << hook))); in ip6t_do_table()
298 e = get_entry(table_base, private->hook_entry[hook]); in ip6t_do_table()
330 trace_packet(state->net, skb, hook, state->in, in ip6t_do_table()
346 private->underflow[hook]); in ip6t_do_table()
[all …]
|
| D | nf_flow_table_ipv6.c | 14 .hook = nf_flow_offload_ipv6_hook,
|
| /net/sched/ |
| D | em_ipt.c | 23 u32 hook; member
52 mtpar.hook_mask = 1 << im->hook; in check_match()
167 im->hook = nla_get_u32(tb[TCA_EM_IPT_HOOK]); in em_ipt_change()
237 nf_hook_state_init(&state, im->hook, nfproto, in em_ipt_match()
256 if (nla_put_u32(skb, TCA_EM_IPT_HOOK, im->hook) < 0) in em_ipt_dump()
|
| D | act_ipt.c | 34 char *table, unsigned int hook) in ipt_init_target() argument
53 par.hook_mask = hook; in ipt_init_target()
107 u32 hook = 0; in __tcf_ipt_init() local
162 hook = nla_get_u32(tb[TCA_IPT_HOOK]); in __tcf_ipt_init()
176 err = ipt_init_target(net, t, tname, hook); in __tcf_ipt_init()
190 ipt->tcfi_hook = hook; in __tcf_ipt_init()
232 .hook = ipt->tcfi_hook, in tcf_ipt_act()
|
| /net/netfilter/ipvs/ |
| D | ip_vs_core.c | 1503 return ip_vs_out(net_ipvs(state->net), state->hook, skb, AF_INET); in ip_vs_reply4()
1514 return ip_vs_out(net_ipvs(state->net), state->hook, skb, AF_INET); in ip_vs_local_reply4()
1528 return ip_vs_out(net_ipvs(state->net), state->hook, skb, AF_INET6); in ip_vs_reply6()
1539 return ip_vs_out(net_ipvs(state->net), state->hook, skb, AF_INET6); in ip_vs_local_reply6()
2165 return ip_vs_in(net_ipvs(state->net), state->hook, skb, AF_INET); in ip_vs_remote_request4()
2176 return ip_vs_in(net_ipvs(state->net), state->hook, skb, AF_INET); in ip_vs_local_request4()
2189 return ip_vs_in(net_ipvs(state->net), state->hook, skb, AF_INET6); in ip_vs_remote_request6()
2200 return ip_vs_in(net_ipvs(state->net), state->hook, skb, AF_INET6); in ip_vs_local_request6()
2229 return ip_vs_in_icmp(ipvs, skb, &r, state->hook); in ip_vs_forward_icmp()
2249 return ip_vs_in_icmp_v6(ipvs, skb, &r, state->hook, &iphdr); in ip_vs_forward_icmp_v6()
[all …]
|
| /net/bridge/ |
| D | br_netfilter_hooks.c | 923 .hook = br_nf_pre_routing,
929 .hook = br_nf_forward_ip,
935 .hook = br_nf_forward_arp,
941 .hook = br_nf_post_routing,
947 .hook = ip_sabotage_in,
953 .hook = ip_sabotage_in,
995 int br_nf_hook_thresh(unsigned int hook, struct net *net, in br_nf_hook_thresh() argument
1008 e = rcu_dereference(net->nf.hooks_bridge[hook]); in br_nf_hook_thresh()
1017 nf_hook_state_init(&state, hook, NFPROTO_BRIDGE, indev, outdev, in br_nf_hook_thresh()
|