| /net/netfilter/ |
| D | nf_queue.c | 263 const struct nf_hook_entries *hooks, in nf_iterate() argument
269 while (i < hooks->num_hook_entries) { in nf_iterate()
270 hook = &hooks->hooks[i]; in nf_iterate()
309 const struct nf_hook_entries *hooks; in nf_reinject() local
319 hooks = nf_hook_entries_head(net, pf, entry->state.hook); in nf_reinject()
324 if (WARN_ON_ONCE(!hooks || i >= hooks->num_hook_entries)) { in nf_reinject()
330 hook_entry = &hooks->hooks[i]; in nf_reinject()
344 verdict = nf_iterate(skb, &entry->state, hooks, &i); in nf_reinject()
|
| D | nft_fib.c | 32 unsigned int hooks; in nft_fib_validate() local
37 hooks = (1 << NF_INET_PRE_ROUTING); in nft_fib_validate()
41 hooks = (1 << NF_INET_PRE_ROUTING) | in nft_fib_validate()
45 hooks = (1 << NF_INET_LOCAL_OUT) | in nft_fib_validate()
49 hooks = (1 << NF_INET_LOCAL_IN) | in nft_fib_validate()
60 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_fib_validate()
|
| D | core.c | 144 new->hooks[nhooks] = old->hooks[i]; in nf_hook_entries_grow()
148 new->hooks[nhooks].hook = reg->hook; in nf_hook_entries_grow()
149 new->hooks[nhooks].priv = reg->priv; in nf_hook_entries_grow()
157 new->hooks[nhooks].hook = reg->hook; in nf_hook_entries_grow()
158 new->hooks[nhooks].priv = reg->priv; in nf_hook_entries_grow()
164 static void hooks_validate(const struct nf_hook_entries *hooks) in hooks_validate() argument
171 orig_ops = nf_hook_entries_get_hook_ops(hooks); in hooks_validate()
173 for (i = 0; i < hooks->num_hook_entries; i++) { in hooks_validate()
256 new->hooks[j] = old->hooks[i]; in __nf_hook_entries_try_shrink()
373 WRITE_ONCE(old->hooks[i].hook, accept_all); in nf_remove_net_hook()
[all …]
|
| D | xt_socket.c | 225 .hooks = (1 << NF_INET_PRE_ROUTING) |
236 .hooks = (1 << NF_INET_PRE_ROUTING) |
248 .hooks = (1 << NF_INET_PRE_ROUTING) |
260 .hooks = (1 << NF_INET_PRE_ROUTING) |
272 .hooks = (1 << NF_INET_PRE_ROUTING) |
284 .hooks = (1 << NF_INET_PRE_ROUTING) |
296 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| D | nf_conntrack_sip.c | 863 const struct nf_nat_sip_hooks *hooks; in set_expected_rtp_rtcp() local
949 hooks = rcu_dereference(nf_nat_sip_hooks); in set_expected_rtp_rtcp()
950 if (hooks && in set_expected_rtp_rtcp()
951 !hooks->sdp_port(skb, protoff, dataoff, dptr, datalen, in set_expected_rtp_rtcp()
971 hooks = rcu_dereference(nf_nat_sip_hooks); in set_expected_rtp_rtcp()
972 if (hooks && ct->status & IPS_NAT_MASK && !direct_rtp) in set_expected_rtp_rtcp()
973 ret = hooks->sdp_media(skb, protoff, dataoff, dptr, in set_expected_rtp_rtcp()
1039 const struct nf_nat_sip_hooks *hooks; in process_sdp() local
1044 hooks = rcu_dereference(nf_nat_sip_hooks); in process_sdp()
1112 if (maddr_len && hooks && ct->status & IPS_NAT_MASK) { in process_sdp()
[all …]
|
| D | xt_nat.c | 160 .hooks = (1 << NF_INET_POST_ROUTING) |
173 .hooks = (1 << NF_INET_PRE_ROUTING) |
185 .hooks = (1 << NF_INET_POST_ROUTING) |
197 .hooks = (1 << NF_INET_PRE_ROUTING) |
209 .hooks = (1 << NF_INET_POST_ROUTING) |
221 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| D | nft_chain_filter.c | 38 .hooks = {
80 .hooks = {
122 .hooks = {
176 .hooks = {
233 .hooks = {
284 .hooks = {
|
| D | nft_meta.c | 394 unsigned int hooks; in nft_meta_get_validate() local
401 hooks = 1 << NF_NETDEV_INGRESS; in nft_meta_get_validate()
406 hooks = (1 << NF_INET_PRE_ROUTING) | in nft_meta_get_validate()
414 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_meta_get_validate()
425 unsigned int hooks; in nft_meta_set_validate() local
432 hooks = 1 << NF_BR_PRE_ROUTING; in nft_meta_set_validate()
435 hooks = 1 << NF_NETDEV_INGRESS; in nft_meta_set_validate()
440 hooks = 1 << NF_INET_PRE_ROUTING; in nft_meta_set_validate()
446 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_meta_set_validate()
|
| D | nft_chain_nat.c | 45 .hooks = {
66 .hooks = {
97 .hooks = {
|
| D | nft_xfrm.c | 234 unsigned int hooks; in nft_xfrm_validate() local
243 hooks = (1 << NF_INET_FORWARD) | in nft_xfrm_validate()
248 hooks = (1 << NF_INET_FORWARD) | in nft_xfrm_validate()
257 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_xfrm_validate()
|
| D | nft_chain_route.c | 58 .hooks = {
108 .hooks = {
139 .hooks = {
|
| D | nft_osf.c | 118 unsigned int hooks; in nft_osf_validate() local
124 hooks = (1 << NF_INET_LOCAL_IN) | in nft_osf_validate()
132 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_osf_validate()
|
| D | xt_CLASSIFY.c | 42 .hooks = (1 << NF_INET_LOCAL_OUT) | (1 << NF_INET_FORWARD) |
52 .hooks = (1 << NF_ARP_OUT) | (1 << NF_ARP_FORWARD),
|
| D | nft_rt.c | 167 unsigned int hooks; in nft_rt_validate() local
181 hooks = (1 << NF_INET_FORWARD) | in nft_rt_validate()
189 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_rt_validate()
|
| D | xt_cgroup.c | 174 .hooks = (1 << NF_INET_LOCAL_OUT) |
188 .hooks = (1 << NF_INET_LOCAL_OUT) |
202 .hooks = (1 << NF_INET_LOCAL_OUT) |
|
| D | xt_REDIRECT.c | 87 .hooks = (1 << NF_INET_PRE_ROUTING) |
100 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| D | xt_MASQUERADE.c | 80 .hooks = 1 << NF_INET_POST_ROUTING,
91 .hooks = 1 << NF_INET_POST_ROUTING,
|
| D | xt_TPROXY.c | 231 .hooks = 1 << NF_INET_PRE_ROUTING,
242 .hooks = 1 << NF_INET_PRE_ROUTING,
254 .hooks = 1 << NF_INET_PRE_ROUTING,
|
| D | xt_NETMAP.c | 127 .hooks = (1 << NF_INET_PRE_ROUTING) |
142 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| D | xt_realm.c | 34 .hooks = (1 << NF_INET_POST_ROUTING) | (1 << NF_INET_FORWARD) |
|
| D | xt_l2tp.c | 321 .hooks = ((1 << NF_INET_PRE_ROUTING) |
335 .hooks = ((1 << NF_INET_PRE_ROUTING) |
|
| D | xt_osf.c | 39 .hooks = (1 << NF_INET_LOCAL_IN) |
|
| D | xt_mac.c | 47 .hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) |
|
| /net/ipv6/netfilter/ |
| D | ip6t_NPT.c | 115 .hooks = (1 << NF_INET_LOCAL_IN) |
127 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| D | ip6t_eui64.c | 55 .hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) |
|