/linux-4.1.27/net/ipv4/netfilter/ |
D | arpt_mangle.c | 20 return NF_DROP; in target() 30 return NF_DROP; in target() 37 return NF_DROP; in target() 44 return NF_DROP; in target() 51 return NF_DROP; in target() 65 if (mangle->target != NF_DROP && mangle->target != NF_ACCEPT && in checkentry()
|
D | ipt_SYNPROXY.c | 265 return NF_DROP; in synproxy_tg4() 269 return NF_DROP; in synproxy_tg4() 272 return NF_DROP; in synproxy_tg4() 290 return NF_DROP; in synproxy_tg4() 295 return NF_DROP; in synproxy_tg4() 328 return NF_DROP; in ipv4_synproxy_hook() 354 return NF_DROP; in ipv4_synproxy_hook() 366 return NF_DROP; in ipv4_synproxy_hook() 378 return NF_DROP; in ipv4_synproxy_hook()
|
D | nft_chain_route_ipv4.c | 49 if (ret != NF_DROP && ret != NF_QUEUE) { in nf_route_table_hook() 57 ret = NF_DROP; in nf_route_table_hook()
|
D | ipt_ECN.c | 86 return NF_DROP; in ecn_tg() 91 return NF_DROP; in ecn_tg()
|
D | nf_nat_l3proto_ipv4.c | 299 return NF_DROP; in nf_nat_ipv4_fn() 343 return NF_DROP; in nf_nat_ipv4_fn() 359 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv4_in() 389 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv4_out() 428 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv4_local_fn()
|
D | nft_reject_ipv4.c | 40 regs->verdict.code = NF_DROP; in nft_reject_ipv4_eval()
|
D | ipt_REJECT.c | 68 return NF_DROP; in reject_tg()
|
D | iptable_filter.c | 66 forward ? -NF_ACCEPT - 1 : -NF_DROP - 1; in iptable_filter_net_init()
|
D | nf_nat_pptp.c | 185 return NF_DROP; in pptp_outbound_pkt() 279 return NF_DROP; in pptp_inbound_pkt()
|
D | nf_nat_masquerade_ipv4.c | 56 return NF_DROP; in nf_nat_masquerade_ipv4()
|
D | iptable_mangle.c | 65 if (ret != NF_DROP && ret != NF_STOLEN) { in ipt_mangle_out()
|
D | nf_nat_snmp_basic.c | 1211 return NF_DROP; in snmp_translate() 1246 return NF_DROP; in help() 1250 return NF_DROP; in help()
|
D | ipt_CLUSTERIP.c | 315 return NF_DROP; in clusterip_tg() 352 return NF_DROP; in clusterip_tg()
|
D | arp_tables.c | 228 return NF_DROP; in arpt_error() 255 unsigned int verdict = NF_DROP; in arpt_do_table() 265 return NF_DROP; in arpt_do_table() 351 return NF_DROP; in arpt_do_table() 556 return verdict == NF_DROP || verdict == NF_ACCEPT; in check_underflow()
|
D | ip_tables.c | 159 return NF_DROP; in ipt_error() 297 unsigned int verdict = NF_DROP; in ipt_do_table() 402 verdict = NF_DROP; in ipt_do_table() 436 return NF_DROP; in ipt_do_table() 718 return verdict == NF_DROP || verdict == NF_ACCEPT; in check_underflow()
|
D | nf_conntrack_l3proto_ipv4.c | 138 return NF_DROP; in ipv4_confirm()
|
/linux-4.1.27/net/bridge/ |
D | br_netfilter.c | 577 return NF_DROP; in br_nf_pre_routing_ipv6() 580 return NF_DROP; in br_nf_pre_routing_ipv6() 585 return NF_DROP; in br_nf_pre_routing_ipv6() 591 return NF_DROP; in br_nf_pre_routing_ipv6() 593 return NF_DROP; in br_nf_pre_routing_ipv6() 596 return NF_DROP; in br_nf_pre_routing_ipv6() 600 return NF_DROP; in br_nf_pre_routing_ipv6() 602 return NF_DROP; in br_nf_pre_routing_ipv6() 628 return NF_DROP; in br_nf_pre_routing() 632 return NF_DROP; in br_nf_pre_routing() [all …]
|
/linux-4.1.27/net/netfilter/ |
D | xt_TCPOPTSTRIP.c | 48 return NF_DROP; in tcpoptstrip_mangle_packet() 52 return NF_DROP; in tcpoptstrip_mangle_packet() 58 return NF_DROP; in tcpoptstrip_mangle_packet() 110 return NF_DROP; in tcpoptstrip_tg6()
|
D | xt_DSCP.c | 38 return NF_DROP; in dscp_tg() 56 return NF_DROP; in dscp_tg6() 88 return NF_DROP; in tos_tg() 108 return NF_DROP; in tos_tg6()
|
D | nf_nat_sip.c | 165 return NF_DROP; in nf_nat_sip() 201 return NF_DROP; in nf_nat_sip() 219 return NF_DROP; in nf_nat_sip() 236 return NF_DROP; in nf_nat_sip() 252 return NF_DROP; in nf_nat_sip() 269 return NF_DROP; in nf_nat_sip() 276 return NF_DROP; in nf_nat_sip() 285 return NF_DROP; in nf_nat_sip() 294 return NF_DROP; in nf_nat_sip() 396 return NF_DROP; in nf_nat_sip_expect() [all …]
|
D | nf_conntrack_sip.c | 856 int direct_rtp = 0, skip_expect = 0, ret = NF_DROP; in set_expected_rtp_rtcp() 1042 return NF_DROP; in process_sdp() 1056 return NF_DROP; in process_sdp() 1216 return NF_DROP; in process_register_request() 1232 return NF_DROP; in process_register_request() 1243 return NF_DROP; in process_register_request() 1263 ret = NF_DROP; in process_register_request() 1320 return NF_DROP; in process_register_response() 1338 return NF_DROP; in process_register_response() 1375 return NF_DROP; in process_sip_response() [all …]
|
D | nf_nat_redirect.c | 65 return NF_DROP; in nf_nat_redirect_ipv4() 113 return NF_DROP; in nf_nat_redirect_ipv6()
|
D | nf_nat_ftp.c | 101 return NF_DROP; in nf_nat_ftp() 120 return NF_DROP; in nf_nat_ftp()
|
D | xt_HL.c | 36 return NF_DROP; in ttl_tg() 76 return NF_DROP; in hl_tg6()
|
D | xt_TPROXY.c | 303 return NF_DROP; in tproxy_tg4() 347 return NF_DROP; in tproxy_tg4() 464 return NF_DROP; in tproxy_tg6_v1() 470 return NF_DROP; in tproxy_tg6_v1() 515 return NF_DROP; in tproxy_tg6_v1()
|
D | nf_conntrack_tftp.c | 65 return NF_DROP; in tftp_help() 81 ret = NF_DROP; in tftp_help()
|
D | xt_TCPMSS.c | 215 return NF_DROP; in tcpmss_tg4() 238 return NF_DROP; in tcpmss_tg6() 244 return NF_DROP; in tcpmss_tg6()
|
D | nf_nat_tftp.c | 33 return NF_DROP; in help()
|
D | nf_conntrack_sane.c | 142 ret = NF_DROP; in help() 157 ret = NF_DROP; in help()
|
D | nf_conntrack_amanda.c | 146 ret = NF_DROP; in amanda_help() 161 ret = NF_DROP; in amanda_help()
|
D | nf_nat_amanda.c | 62 return NF_DROP; in help()
|
D | nf_conntrack_irc.c | 200 ret = NF_DROP; in help() 219 ret = NF_DROP; in help()
|
D | nf_nat_irc.c | 65 return NF_DROP; in help()
|
D | nf_conntrack_ftp.c | 476 ret = NF_DROP; in help() 490 ret = NF_DROP; in help() 542 ret = NF_DROP; in help()
|
D | nft_reject_inet.c | 62 regs->verdict.code = NF_DROP; in nft_reject_inet_eval()
|
D | nft_compat.c | 71 ret = NF_DROP; in nft_target_eval_xt() 97 ret = NF_DROP; in nft_target_eval_bridge() 104 regs->verdict.code = NF_DROP; in nft_target_eval_bridge() 320 regs->verdict.code = NF_DROP; in nft_match_eval()
|
D | nf_queue.c | 209 verdict = NF_DROP; in nf_reinject()
|
D | nfnetlink_cthelper.c | 44 return NF_DROP; in nfnl_userspace_cthelper() 49 return NF_DROP; in nfnl_userspace_cthelper()
|
D | nf_tables_core.c | 169 case NF_DROP: in nft_do_chain()
|
D | core.c | 177 } else if ((verdict & NF_VERDICT_MASK) == NF_DROP) { in nf_hook_slow()
|
D | nf_conntrack_core.c | 677 return NF_DROP; in __nf_conntrack_confirm() 1125 ret = NF_DROP; in nf_conntrack_in() 1142 if (ret == -NF_DROP) in nf_conntrack_in()
|
D | nfnetlink_queue_core.c | 233 nf_reinject(entry, NF_DROP); in nfqnl_flush() 1028 verdict = NF_DROP; in nfqnl_recv_verdict()
|
D | nf_conntrack_h323_main.c | 628 return NF_DROP; in h245_help() 1204 return NF_DROP; in q931_help() 1802 return NF_DROP; in ras_help()
|
D | nf_nat_core.c | 502 return NF_DROP; in nf_nat_packet()
|
D | nf_tables_api.c | 1235 case NF_DROP: in nf_tables_newchain() 3786 case NF_DROP: in nft_chain_commit_update() 4333 case NF_DROP: in nft_verdict_init()
|
D | nf_conntrack_proto_tcp.c | 871 return NF_DROP; in tcp_packet()
|
/linux-4.1.27/net/ipv6/netfilter/ |
D | nft_chain_route_ipv6.c | 37 return NF_DROP; in nf_route_table_hook() 49 if (ret != NF_DROP && ret != NF_QUEUE && in nf_route_table_hook() 55 return ip6_route_me_harder(skb) == 0 ? ret : NF_DROP; in nf_route_table_hook()
|
D | ip6t_SYNPROXY.c | 280 return NF_DROP; in synproxy_tg6() 284 return NF_DROP; in synproxy_tg6() 287 return NF_DROP; in synproxy_tg6() 305 return NF_DROP; in synproxy_tg6() 310 return NF_DROP; in synproxy_tg6() 350 return NF_DROP; in ipv6_synproxy_hook() 376 return NF_DROP; in ipv6_synproxy_hook() 388 return NF_DROP; in ipv6_synproxy_hook() 400 return NF_DROP; in ipv6_synproxy_hook()
|
D | ip6t_NPT.c | 91 return NF_DROP; in ip6t_snpt_tg() 104 return NF_DROP; in ip6t_dnpt_tg()
|
D | nf_nat_l3proto_ipv6.c | 308 return NF_DROP; in nf_nat_ipv6_fn() 351 return NF_DROP; in nf_nat_ipv6_fn() 367 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv6_in() 396 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv6_out() 434 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv6_local_fn()
|
D | nft_reject_ipv6.c | 41 regs->verdict.code = NF_DROP; in nft_reject_ipv6_eval()
|
D | ip6table_filter.c | 58 forward ? -NF_ACCEPT - 1 : -NF_DROP - 1; in ip6table_filter_net_init()
|
D | ip6t_REJECT.c | 73 return NF_DROP; in reject_tg6()
|
D | nf_tables_ipv6.c | 27 return NF_DROP; in nft_do_chain_ipv6()
|
D | nf_nat_masquerade_ipv6.c | 39 return NF_DROP; in nf_nat_masquerade_ipv6()
|
D | ip6table_mangle.c | 63 if (ret != NF_DROP && ret != NF_STOLEN && in ip6t_mangle_out()
|
D | ip6_tables.c | 190 return NF_DROP; in ip6t_error() 325 unsigned int verdict = NF_DROP; in ip6t_do_table() 419 verdict = NF_DROP; in ip6t_do_table() 449 return NF_DROP; in ip6t_do_table() 732 return verdict == NF_DROP || verdict == NF_ACCEPT; in check_underflow()
|
D | nf_conntrack_l3proto_ipv6.c | 160 return NF_DROP; in ipv6_confirm()
|
/linux-4.1.27/include/uapi/linux/ |
D | netfilter.h | 10 #define NF_DROP 0 macro 32 #define NF_DROP_ERR(x) (((-x) << 16) | NF_DROP)
|
/linux-4.1.27/net/netfilter/ipvs/ |
D | ip_vs_core.c | 540 return NF_DROP; in ip_vs_leave() 576 return NF_DROP; in ip_vs_leave() 623 return NF_DROP; in ip_vs_leave() 823 unsigned int verdict = NF_DROP; in handle_response_icmp() 899 return NF_DROP; in ip_vs_out_icmp() 964 return NF_DROP; in ip_vs_out_icmp_v6() 981 return NF_DROP; in ip_vs_out_icmp_v6() 1271 return NF_DROP; in ip_vs_out() 1362 return NF_DROP; in ip_vs_in_icmp() 1429 verdict = NF_DROP; in ip_vs_in_icmp() [all …]
|
D | ip_vs_proto_udp.c | 43 *verdict = NF_DROP; in udp_conn_schedule() 59 *verdict = NF_DROP; in udp_conn_schedule() 72 *verdict = NF_DROP; in udp_conn_schedule()
|
D | ip_vs_proto_sctp.c | 24 *verdict = NF_DROP; in sctp_conn_schedule() 31 *verdict = NF_DROP; in sctp_conn_schedule() 49 *verdict = NF_DROP; in sctp_conn_schedule() 61 *verdict = NF_DROP; in sctp_conn_schedule()
|
D | ip_vs_proto_tcp.c | 46 *verdict = NF_DROP; in tcp_conn_schedule() 64 *verdict = NF_DROP; in tcp_conn_schedule() 77 *verdict = NF_DROP; in tcp_conn_schedule()
|
D | ip_vs_xmit.c | 1035 else if (ret == NF_DROP) in ip_vs_tunnel_xmit() 1126 else if (ret == NF_DROP) in ip_vs_tunnel_xmit_v6()
|
/linux-4.1.27/net/bridge/netfilter/ |
D | ebtable_broute.c | 57 if (ret == NF_DROP) in ebt_broute()
|
D | nft_reject_bridge.c | 313 regs->verdict.code = NF_DROP; in nft_reject_bridge_eval()
|
D | ebtables.c | 230 return NF_DROP; in ebt_do_table() 257 return NF_DROP; in ebt_do_table() 284 return NF_DROP; in ebt_do_table() 297 return NF_DROP; in ebt_do_table() 318 return NF_DROP; in ebt_do_table()
|
/linux-4.1.27/security/selinux/ |
D | hooks.c | 4815 return NF_DROP; in selinux_ip_forward() 4822 return NF_DROP; in selinux_ip_forward() 4829 return NF_DROP; in selinux_ip_forward() 4836 return NF_DROP; in selinux_ip_forward() 4844 return NF_DROP; in selinux_ip_forward() 4902 return NF_DROP; in selinux_ip_output() 4934 return NF_DROP; in selinux_ip_postroute_compat() 5000 return NF_DROP; in selinux_ip_postroute() 5018 return NF_DROP; in selinux_ip_postroute() 5040 return NF_DROP; in selinux_ip_postroute() [all …]
|
/linux-4.1.27/net/sched/ |
D | act_ipt.c | 203 case NF_DROP: in tcf_ipt()
|