/linux-4.4.14/net/ipv4/netfilter/ |
D | arpt_mangle.c | 20 return NF_DROP; in target() 30 return NF_DROP; in target() 37 return NF_DROP; in target() 44 return NF_DROP; in target() 51 return NF_DROP; in target() 65 if (mangle->target != NF_DROP && mangle->target != NF_ACCEPT && in checkentry()
|
D | ipt_SYNPROXY.c | 270 return NF_DROP; in synproxy_tg4() 274 return NF_DROP; in synproxy_tg4() 277 return NF_DROP; in synproxy_tg4() 295 return NF_DROP; in synproxy_tg4() 300 return NF_DROP; in synproxy_tg4() 333 return NF_DROP; in ipv4_synproxy_hook() 359 return NF_DROP; in ipv4_synproxy_hook() 371 return NF_DROP; in ipv4_synproxy_hook() 383 return NF_DROP; in ipv4_synproxy_hook()
|
D | nft_chain_route_ipv4.c | 49 if (ret != NF_DROP && ret != NF_QUEUE) { in nf_route_table_hook() 57 ret = NF_DROP; in nf_route_table_hook()
|
D | ipt_ECN.c | 86 return NF_DROP; in ecn_tg() 91 return NF_DROP; in ecn_tg()
|
D | nf_nat_l3proto_ipv4.c | 299 return NF_DROP; in nf_nat_ipv4_fn() 343 return NF_DROP; in nf_nat_ipv4_fn() 359 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv4_in() 389 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv4_out() 428 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv4_local_fn()
|
D | nft_reject_ipv4.c | 39 regs->verdict.code = NF_DROP; in nft_reject_ipv4_eval()
|
D | iptable_filter.c | 63 forward ? -NF_ACCEPT - 1 : -NF_DROP - 1; in iptable_filter_net_init()
|
D | ipt_REJECT.c | 68 return NF_DROP; in reject_tg()
|
D | nf_nat_pptp.c | 185 return NF_DROP; in pptp_outbound_pkt() 279 return NF_DROP; in pptp_inbound_pkt()
|
D | iptable_mangle.c | 63 if (ret != NF_DROP && ret != NF_STOLEN) { in ipt_mangle_out()
|
D | nf_nat_masquerade_ipv4.c | 56 return NF_DROP; in nf_nat_masquerade_ipv4()
|
D | nf_nat_snmp_basic.c | 1211 return NF_DROP; in snmp_translate() 1246 return NF_DROP; in help() 1250 return NF_DROP; in help()
|
D | arp_tables.c | 228 return NF_DROP; in arpt_error() 255 unsigned int verdict = NF_DROP; in arpt_do_table() 266 return NF_DROP; in arpt_do_table() 356 return NF_DROP; in arpt_do_table() 564 return verdict == NF_DROP || verdict == NF_ACCEPT; in check_underflow()
|
D | ipt_CLUSTERIP.c | 315 return NF_DROP; in clusterip_tg() 352 return NF_DROP; in clusterip_tg()
|
D | ip_tables.c | 159 return NF_DROP; in ipt_error() 295 unsigned int verdict = NF_DROP; in ipt_do_table() 441 return NF_DROP; in ipt_do_table() 725 return verdict == NF_DROP || verdict == NF_ACCEPT; in check_underflow()
|
D | nf_conntrack_l3proto_ipv4.c | 138 return NF_DROP; in ipv4_confirm()
|
/linux-4.4.14/net/netfilter/ |
D | xt_TCPOPTSTRIP.c | 48 return NF_DROP; in tcpoptstrip_mangle_packet() 52 return NF_DROP; in tcpoptstrip_mangle_packet() 58 return NF_DROP; in tcpoptstrip_mangle_packet() 110 return NF_DROP; in tcpoptstrip_tg6()
|
D | xt_DSCP.c | 38 return NF_DROP; in dscp_tg() 56 return NF_DROP; in dscp_tg6() 88 return NF_DROP; in tos_tg() 108 return NF_DROP; in tos_tg6()
|
D | nf_nat_sip.c | 165 return NF_DROP; in nf_nat_sip() 201 return NF_DROP; in nf_nat_sip() 219 return NF_DROP; in nf_nat_sip() 236 return NF_DROP; in nf_nat_sip() 252 return NF_DROP; in nf_nat_sip() 269 return NF_DROP; in nf_nat_sip() 276 return NF_DROP; in nf_nat_sip() 285 return NF_DROP; in nf_nat_sip() 294 return NF_DROP; in nf_nat_sip() 396 return NF_DROP; in nf_nat_sip_expect() [all …]
|
D | nf_conntrack_sip.c | 856 int direct_rtp = 0, skip_expect = 0, ret = NF_DROP; in set_expected_rtp_rtcp() 1042 return NF_DROP; in process_sdp() 1056 return NF_DROP; in process_sdp() 1216 return NF_DROP; in process_register_request() 1232 return NF_DROP; in process_register_request() 1243 return NF_DROP; in process_register_request() 1263 ret = NF_DROP; in process_register_request() 1320 return NF_DROP; in process_register_response() 1338 return NF_DROP; in process_register_response() 1375 return NF_DROP; in process_sip_response() [all …]
|
D | nf_nat_redirect.c | 65 return NF_DROP; in nf_nat_redirect_ipv4() 113 return NF_DROP; in nf_nat_redirect_ipv6()
|
D | nf_nat_ftp.c | 101 return NF_DROP; in nf_nat_ftp() 120 return NF_DROP; in nf_nat_ftp()
|
D | xt_HL.c | 36 return NF_DROP; in ttl_tg() 76 return NF_DROP; in hl_tg6()
|
D | xt_TPROXY.c | 302 return NF_DROP; in tproxy_tg4() 346 return NF_DROP; in tproxy_tg4() 462 return NF_DROP; in tproxy_tg6_v1() 468 return NF_DROP; in tproxy_tg6_v1() 513 return NF_DROP; in tproxy_tg6_v1()
|
D | nf_conntrack_tftp.c | 65 return NF_DROP; in tftp_help() 81 ret = NF_DROP; in tftp_help()
|
D | xt_TCPMSS.c | 215 return NF_DROP; in tcpmss_tg4() 238 return NF_DROP; in tcpmss_tg6() 244 return NF_DROP; in tcpmss_tg6()
|
D | nf_nat_tftp.c | 33 return NF_DROP; in help()
|
D | nf_conntrack_sane.c | 142 ret = NF_DROP; in help() 157 ret = NF_DROP; in help()
|
D | nf_conntrack_amanda.c | 146 ret = NF_DROP; in amanda_help() 161 ret = NF_DROP; in amanda_help()
|
D | nf_nat_amanda.c | 62 return NF_DROP; in help()
|
D | nf_conntrack_irc.c | 200 ret = NF_DROP; in help() 219 ret = NF_DROP; in help()
|
D | nf_nat_irc.c | 65 return NF_DROP; in help()
|
D | nft_reject_inet.c | 61 regs->verdict.code = NF_DROP; in nft_reject_inet_eval()
|
D | nf_conntrack_ftp.c | 476 ret = NF_DROP; in help() 490 ret = NF_DROP; in help() 542 ret = NF_DROP; in help()
|
D | nft_compat.c | 71 ret = NF_DROP; in nft_target_eval_xt() 97 ret = NF_DROP; in nft_target_eval_bridge() 104 regs->verdict.code = NF_DROP; in nft_target_eval_bridge() 321 regs->verdict.code = NF_DROP; in nft_match_eval()
|
D | nf_queue.c | 183 verdict = NF_DROP; in nf_reinject()
|
D | nf_tables_core.c | 162 case NF_DROP: in nft_do_chain()
|
D | nfnetlink_cthelper.c | 44 return NF_DROP; in nfnl_userspace_cthelper() 49 return NF_DROP; in nfnl_userspace_cthelper()
|
D | core.c | 309 } else if ((verdict & NF_VERDICT_MASK) == NF_DROP) { in nf_hook_slow()
|
D | nf_conntrack_core.c | 698 return NF_DROP; in __nf_conntrack_confirm() 1150 ret = NF_DROP; in nf_conntrack_in() 1167 if (ret == -NF_DROP) in nf_conntrack_in()
|
D | nfnetlink_queue.c | 233 nf_reinject(entry, NF_DROP); in nfqnl_flush() 1082 verdict = NF_DROP; in nfqnl_recv_verdict()
|
D | nf_conntrack_h323_main.c | 628 return NF_DROP; in h245_help() 1204 return NF_DROP; in q931_help() 1802 return NF_DROP; in ras_help()
|
D | nf_nat_core.c | 506 return NF_DROP; in nf_nat_packet()
|
D | nf_tables_api.c | 1282 case NF_DROP: in nf_tables_newchain() 3854 case NF_DROP: in nft_chain_commit_update() 4402 case NF_DROP: in nft_verdict_init()
|
D | nf_conntrack_proto_tcp.c | 871 return NF_DROP; in tcp_packet()
|
/linux-4.4.14/net/ipv6/netfilter/ |
D | nft_chain_route_ipv6.c | 37 return NF_DROP; in nf_route_table_hook() 49 if (ret != NF_DROP && ret != NF_QUEUE && in nf_route_table_hook() 55 return ip6_route_me_harder(state->net, skb) == 0 ? ret : NF_DROP; in nf_route_table_hook()
|
D | ip6t_SYNPROXY.c | 283 return NF_DROP; in synproxy_tg6() 287 return NF_DROP; in synproxy_tg6() 290 return NF_DROP; in synproxy_tg6() 308 return NF_DROP; in synproxy_tg6() 313 return NF_DROP; in synproxy_tg6() 353 return NF_DROP; in ipv6_synproxy_hook() 379 return NF_DROP; in ipv6_synproxy_hook() 391 return NF_DROP; in ipv6_synproxy_hook() 403 return NF_DROP; in ipv6_synproxy_hook()
|
D | nf_nat_l3proto_ipv6.c | 308 return NF_DROP; in nf_nat_ipv6_fn() 351 return NF_DROP; in nf_nat_ipv6_fn() 367 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv6_in() 396 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv6_out() 434 if (ret != NF_DROP && ret != NF_STOLEN && in nf_nat_ipv6_local_fn()
|
D | ip6t_NPT.c | 91 return NF_DROP; in ip6t_snpt_tg() 104 return NF_DROP; in ip6t_dnpt_tg()
|
D | nft_reject_ipv6.c | 40 regs->verdict.code = NF_DROP; in nft_reject_ipv6_eval()
|
D | ip6table_filter.c | 56 forward ? -NF_ACCEPT - 1 : -NF_DROP - 1; in ip6table_filter_net_init()
|
D | ip6t_REJECT.c | 74 return NF_DROP; in reject_tg6()
|
D | nf_tables_ipv6.c | 27 return NF_DROP; in nft_do_chain_ipv6()
|
D | nf_nat_masquerade_ipv6.c | 39 return NF_DROP; in nf_nat_masquerade_ipv6()
|
D | ip6table_mangle.c | 62 if (ret != NF_DROP && ret != NF_STOLEN && in ip6t_mangle_out()
|
D | ip6_tables.c | 190 return NF_DROP; in ip6t_error() 323 unsigned int verdict = NF_DROP; in ip6t_do_table() 453 return NF_DROP; in ip6t_do_table() 737 return verdict == NF_DROP || verdict == NF_ACCEPT; in check_underflow()
|
D | nf_conntrack_l3proto_ipv6.c | 160 return NF_DROP; in ipv6_confirm()
|
/linux-4.4.14/include/uapi/linux/ |
D | netfilter.h | 11 #define NF_DROP 0 macro 33 #define NF_DROP_ERR(x) (((-x) << 16) | NF_DROP)
|
/linux-4.4.14/net/bridge/ |
D | br_netfilter_hooks.c | 474 return NF_DROP; in br_nf_pre_routing() 478 return NF_DROP; in br_nf_pre_routing() 498 return NF_DROP; in br_nf_pre_routing() 502 return NF_DROP; in br_nf_pre_routing() 504 return NF_DROP; in br_nf_pre_routing() 584 return NF_DROP; in br_nf_forward_ip() 588 return NF_DROP; in br_nf_forward_ip() 592 return NF_DROP; in br_nf_forward_ip() 610 return NF_DROP; in br_nf_forward_ip() 616 return NF_DROP; in br_nf_forward_ip() [all …]
|
D | br_netfilter_ipv6.c | 227 return NF_DROP; in br_nf_pre_routing_ipv6() 231 return NF_DROP; in br_nf_pre_routing_ipv6() 233 return NF_DROP; in br_nf_pre_routing_ipv6()
|
/linux-4.4.14/net/netfilter/ipvs/ |
D | ip_vs_core.c | 574 return NF_DROP; in ip_vs_leave() 601 return NF_DROP; in ip_vs_leave() 629 return NF_DROP; in ip_vs_leave() 647 return NF_DROP; in ip_vs_leave() 846 unsigned int verdict = NF_DROP; in handle_response_icmp() 922 return NF_DROP; in ip_vs_out_icmp() 987 return NF_DROP; in ip_vs_out_icmp_v6() 1004 return NF_DROP; in ip_vs_out_icmp_v6() 1284 return NF_DROP; in ip_vs_out() 1412 return NF_DROP; in ip_vs_in_icmp() [all …]
|
D | ip_vs_proto_udp.c | 52 *verdict = NF_DROP; in udp_conn_schedule() 73 *verdict = NF_DROP; in udp_conn_schedule() 86 *verdict = NF_DROP; in udp_conn_schedule()
|
D | ip_vs_proto_sctp.c | 38 *verdict = NF_DROP; in sctp_conn_schedule() 58 *verdict = NF_DROP; in sctp_conn_schedule() 70 *verdict = NF_DROP; in sctp_conn_schedule()
|
D | ip_vs_proto_tcp.c | 61 *verdict = NF_DROP; in tcp_conn_schedule() 84 *verdict = NF_DROP; in tcp_conn_schedule() 97 *verdict = NF_DROP; in tcp_conn_schedule()
|
D | ip_vs_xmit.c | 1053 else if (ret == NF_DROP) in ip_vs_tunnel_xmit() 1145 else if (ret == NF_DROP) in ip_vs_tunnel_xmit_v6()
|
/linux-4.4.14/net/bridge/netfilter/ |
D | ebtable_broute.c | 61 if (ret == NF_DROP) in ebt_broute()
|
D | nft_reject_bridge.c | 312 regs->verdict.code = NF_DROP; in nft_reject_bridge_eval()
|
D | ebtables.c | 232 return NF_DROP; in ebt_do_table() 259 return NF_DROP; in ebt_do_table() 286 return NF_DROP; in ebt_do_table() 299 return NF_DROP; in ebt_do_table() 320 return NF_DROP; in ebt_do_table()
|
/linux-4.4.14/security/selinux/ |
D | hooks.c | 4833 return NF_DROP; in selinux_ip_forward() 4840 return NF_DROP; in selinux_ip_forward() 4847 return NF_DROP; in selinux_ip_forward() 4854 return NF_DROP; in selinux_ip_forward() 4862 return NF_DROP; in selinux_ip_forward() 4920 return NF_DROP; in selinux_ip_output() 4952 return NF_DROP; in selinux_ip_postroute_compat() 5018 return NF_DROP; in selinux_ip_postroute() 5038 return NF_DROP; in selinux_ip_postroute() 5060 return NF_DROP; in selinux_ip_postroute() [all …]
|
/linux-4.4.14/net/sched/ |
D | act_ipt.c | 204 case NF_DROP: in tcf_ipt()
|
/linux-4.4.14/net/openvswitch/ |
D | conntrack.c | 295 return NF_DROP; in ovs_ct_helper()
|