Home
last modified time | relevance | path

Searched refs:hooknum (Results 1 – 83 of 83) sorted by relevance

/linux-4.4.14/net/ipv6/netfilter/
Dip6t_REJECT.c46 nf_send_unreach6(net, skb, ICMPV6_NOROUTE, par->hooknum); in reject_tg6()
49 nf_send_unreach6(net, skb, ICMPV6_ADM_PROHIBITED, par->hooknum); in reject_tg6()
52 nf_send_unreach6(net, skb, ICMPV6_NOT_NEIGHBOUR, par->hooknum); in reject_tg6()
55 nf_send_unreach6(net, skb, ICMPV6_ADDR_UNREACH, par->hooknum); in reject_tg6()
58 nf_send_unreach6(net, skb, ICMPV6_PORT_UNREACH, par->hooknum); in reject_tg6()
64 nf_send_reset6(net, skb, par->hooknum); in reject_tg6()
67 nf_send_unreach6(net, skb, ICMPV6_POLICY_FAIL, par->hooknum); in reject_tg6()
70 nf_send_unreach6(net, skb, ICMPV6_REJECT_ROUTE, par->hooknum); in reject_tg6()
Dnf_defrag_ipv6_hooks.c33 static enum ip6_defrag_users nf_ct6_defrag_user(unsigned int hooknum, in nf_ct6_defrag_user() argument
48 if (hooknum == NF_INET_PRE_ROUTING) in nf_ct6_defrag_user()
89 .hooknum = NF_INET_PRE_ROUTING,
95 .hooknum = NF_INET_LOCAL_OUT,
Dip6table_nat.c74 .hooknum = NF_INET_PRE_ROUTING,
81 .hooknum = NF_INET_POST_ROUTING,
88 .hooknum = NF_INET_LOCAL_OUT,
95 .hooknum = NF_INET_LOCAL_IN,
Dnf_dup_ipv6.c49 void nf_dup_ipv6(struct net *net, struct sk_buff *skb, unsigned int hooknum, in nf_dup_ipv6() argument
64 if (hooknum == NF_INET_PRE_ROUTING || in nf_dup_ipv6()
65 hooknum == NF_INET_LOCAL_IN) { in nf_dup_ipv6()
Dnf_conntrack_proto_icmpv6.c108 unsigned int hooknum, in icmpv6_packet() argument
149 unsigned int hooknum) in icmpv6_error_message() argument
200 enum ip_conntrack_info *ctinfo, u_int8_t pf, unsigned int hooknum) in icmpv6_error() argument
214 if (net->ct.sysctl_checksum && hooknum == NF_INET_PRE_ROUTING && in icmpv6_error()
215 nf_ip6_checksum(skb, hooknum, dataoff, IPPROTO_ICMPV6)) { in icmpv6_error()
235 return icmpv6_error_message(net, tmpl, skb, dataoff, ctinfo, hooknum); in icmpv6_error()
Dnf_conntrack_l3proto_ipv6.c191 .hooknum = NF_INET_PRE_ROUTING,
197 .hooknum = NF_INET_LOCAL_OUT,
203 .hooknum = NF_INET_POST_ROUTING,
209 .hooknum = NF_INET_POST_ROUTING,
215 .hooknum = NF_INET_LOCAL_IN,
221 .hooknum = NF_INET_LOCAL_IN,
Dnf_reject_ipv6.c236 unsigned char code, unsigned int hooknum) in nf_send_unreach6() argument
238 if (!reject6_csum_ok(skb_in, hooknum)) in nf_send_unreach6()
241 if (hooknum == NF_INET_LOCAL_OUT && skb_in->dev == NULL) in nf_send_unreach6()
Dnf_nat_l3proto_ipv6.c199 unsigned int hooknum, in nf_nat_icmpv6_reply_translation() argument
207 enum nf_nat_manip_type manip = HOOK2MANIP(hooknum); in nf_nat_icmpv6_reply_translation()
216 if (nf_ip6_checksum(skb, hooknum, hdrlen, IPPROTO_ICMPV6)) in nf_nat_icmpv6_reply_translation()
Dnf_log_ipv6.c345 unsigned int hooknum, const struct sk_buff *skb, in nf_log_ip6_packet() argument
362 nf_log_dump_packet_common(m, pf, hooknum, skb, in, out, in nf_log_ip6_packet()
Dip6t_SYNPROXY.c282 if (nf_ip6_checksum(skb, par->hooknum, par->thoff, IPPROTO_TCP)) in synproxy_tg6()
462 .hooknum = NF_INET_LOCAL_IN,
468 .hooknum = NF_INET_POST_ROUTING,
Dip6_tables.c347 acpar.hooknum = hook; in ip6t_do_table()
/linux-4.4.14/include/net/netfilter/
Dnf_nat.h13 #define HOOK2MANIP(hooknum) ((hooknum) != NF_INET_POST_ROUTING && \ argument
14 (hooknum) != NF_INET_LOCAL_IN)
47 unsigned int hooknum);
64 static inline bool nf_nat_oif_changed(unsigned int hooknum, in nf_nat_oif_changed() argument
71 return nat->masq_index && hooknum == NF_INET_POST_ROUTING && in nf_nat_oif_changed()
Dnf_log.h38 unsigned int hooknum,
75 unsigned int hooknum,
85 unsigned int hooknum,
106 unsigned int hooknum, const struct sk_buff *skb,
Dnf_nat_redirect.h7 unsigned int hooknum);
10 unsigned int hooknum);
Dnf_nat_l3proto.h44 unsigned int hooknum);
77 unsigned int hooknum, unsigned int hdrlen);
Dnf_conntrack_l4proto.h43 unsigned int hooknum,
56 u_int8_t pf, unsigned int hooknum);
Dnfnetlink_log.h7 unsigned int hooknum,
Dnf_nat_core.h11 unsigned int hooknum, struct sk_buff *skb);
Dnf_conntrack_core.h23 unsigned int nf_conntrack_in(struct net *net, u_int8_t pf, unsigned int hooknum,
Dnf_tables.h37 pkt->hook = pkt->xt.hooknum = state->hook; in nft_set_pktinfo()
/linux-4.4.14/net/netfilter/
Dxt_NETMAP.c36 if (par->hooknum == NF_INET_PRE_ROUTING || in netmap_tg6()
37 par->hooknum == NF_INET_LOCAL_OUT) in netmap_tg6()
54 return nf_nat_setup_info(ct, &newrange, HOOK2MANIP(par->hooknum)); in netmap_tg6()
75 NF_CT_ASSERT(par->hooknum == NF_INET_PRE_ROUTING || in netmap_tg4()
76 par->hooknum == NF_INET_POST_ROUTING || in netmap_tg4()
77 par->hooknum == NF_INET_LOCAL_OUT || in netmap_tg4()
78 par->hooknum == NF_INET_LOCAL_IN); in netmap_tg4()
83 if (par->hooknum == NF_INET_PRE_ROUTING || in netmap_tg4()
84 par->hooknum == NF_INET_LOCAL_OUT) in netmap_tg4()
99 return nf_nat_setup_info(ct, &newrange, HOOK2MANIP(par->hooknum)); in netmap_tg4()
Dnf_nat_redirect.c34 unsigned int hooknum) in nf_nat_redirect_ipv4() argument
41 NF_CT_ASSERT(hooknum == NF_INET_PRE_ROUTING || in nf_nat_redirect_ipv4()
42 hooknum == NF_INET_LOCAL_OUT); in nf_nat_redirect_ipv4()
48 if (hooknum == NF_INET_LOCAL_OUT) { in nf_nat_redirect_ipv4()
86 unsigned int hooknum) in nf_nat_redirect_ipv6() argument
94 if (hooknum == NF_INET_LOCAL_OUT) { in nf_nat_redirect_ipv6()
Dxt_repldata.h19 unsigned int bytes = 0, hooknum = 0, i = 0; \
37 for (; hook_mask != 0; hook_mask >>= 1, ++hooknum) { \
40 tbl->repl.hook_entry[hooknum] = bytes; \
41 tbl->repl.underflow[hooknum] = bytes; \
Dcore.c71 hook_list = &net->nf.hooks[reg->pf][reg->hooknum]; in nf_find_hook_list()
72 else if (reg->hooknum == NF_NETDEV_INGRESS) { in nf_find_hook_list()
113 if (reg->pf == NFPROTO_NETDEV && reg->hooknum == NF_NETDEV_INGRESS) in nf_register_net_hook()
117 static_key_slow_inc(&nf_hooks_needed[reg->pf][reg->hooknum]); in nf_register_net_hook()
147 if (reg->pf == NFPROTO_NETDEV && reg->hooknum == NF_NETDEV_INGRESS) in nf_unregister_net_hook()
151 static_key_slow_dec(&nf_hooks_needed[reg->pf][reg->hooknum]); in nf_unregister_net_hook()
Dxt_REDIRECT.c34 return nf_nat_redirect_ipv6(skb, par->targinfo, par->hooknum); in redirect_tg6()
65 return nf_nat_redirect_ipv4(skb, par->targinfo, par->hooknum); in redirect_tg4()
Dnf_tables_inet.c29 if (afi->hooks[ops->hooknum]) in nft_inet_hook_ops_init()
30 ops->hook = afi->hooks[ops->hooknum]; in nft_inet_hook_ops_init()
Dnf_conntrack_proto_udp.c86 unsigned int hooknum, in udp_packet() argument
114 unsigned int hooknum) in udp_error() argument
145 if (net->ct.sysctl_checksum && hooknum == NF_INET_PRE_ROUTING && in udp_error()
146 nf_checksum(skb, hooknum, dataoff, IPPROTO_UDP, pf)) { in udp_error()
Dnf_conntrack_proto_udplite.c94 unsigned int hooknum, in udplite_packet() argument
124 unsigned int hooknum) in udplite_error() argument
159 if (net->ct.sysctl_checksum && hooknum == NF_INET_PRE_ROUTING && in udplite_error()
160 nf_checksum_partial(skb, hooknum, dataoff, cscov, IPPROTO_UDP, in udplite_error()
Dxt_TEE.c36 nf_dup_ipv4(par->net, skb, par->hooknum, &info->gw.in, oif); in tee_tg4()
48 nf_dup_ipv6(par->net, skb, par->hooknum, &info->gw.in6, oif); in tee_tg6()
Dnf_log.c193 unsigned int hooknum, in nf_log_packet() argument
214 logger->logfn(net, pf, hooknum, skb, in, out, loginfo, prefix); in nf_log_packet()
222 unsigned int hooknum, in nf_log_trace() argument
238 logger->logfn(net, pf, hooknum, skb, in, out, loginfo, prefix); in nf_log_trace()
Dxt_NFLOG.c36 nfulnl_log_packet(net, par->family, par->hooknum, skb, par->in, in nflog_tg()
Dxt_LOG.c42 nf_log_packet(net, par->family, par->hooknum, skb, par->in, par->out, in log_tg()
Dnf_nat_core.c468 nf_nat_alloc_null_binding(struct nf_conn *ct, unsigned int hooknum) in nf_nat_alloc_null_binding() argument
470 return __nf_nat_alloc_null_binding(ct, HOOK2MANIP(hooknum)); in nf_nat_alloc_null_binding()
477 unsigned int hooknum, in nf_nat_packet() argument
484 enum nf_nat_manip_type mtype = HOOK2MANIP(hooknum); in nf_nat_packet()
Dnf_conntrack_proto_dccp.c480 u_int8_t pf, unsigned int hooknum, in dccp_packet() argument
573 u_int8_t pf, unsigned int hooknum) in dccp_error() argument
601 if (net->ct.sysctl_checksum && hooknum == NF_INET_PRE_ROUTING && in dccp_error()
602 nf_checksum_partial(skb, hooknum, dataoff, cscov, IPPROTO_DCCP, in dccp_error()
Dxt_osf.c330 nf_log_packet(net, p->family, p->hooknum, skb, in xt_osf_match_packet()
345 nf_log_packet(net, p->family, p->hooknum, skb, p->in, in xt_osf_match_packet()
Dnft_compat.c159 par->hook_mask = 1 << ops->hooknum; in nft_target_set_tgchk_param()
295 hook_mask = 1 << ops->hooknum; in nft_target_validate()
376 par->hook_mask = 1 << ops->hooknum; in nft_match_set_mtchk_param()
477 hook_mask = 1 << ops->hooknum; in nft_match_validate()
Dnf_conntrack_proto_generic.c82 unsigned int hooknum, in generic_packet() argument
Dnfnetlink_log.c402 unsigned int hooknum, in __build_packet_message() argument
428 pmsg.hook = hooknum; in __build_packet_message()
623 unsigned int hooknum, in nfulnl_log_packet() argument
737 hooknum, in, out, prefix, plen, in nfulnl_log_packet()
Dnf_log_common.c153 unsigned int hooknum, const struct sk_buff *skb, in nf_log_dump_packet_common() argument
Dxt_AUDIT.c135 info->type, par->hooknum, skb->len, in audit_tg()
Dx_tables.c1422 uint8_t hooknum; in xt_hook_link() local
1430 for (i = 0, hooknum = 0; i < num_hooks && hook_mask != 0; in xt_hook_link()
1431 hook_mask >>= 1, ++hooknum) { in xt_hook_link()
1436 ops[i].hooknum = hooknum; in xt_hook_link()
Dnf_conntrack_proto_tcp.c757 unsigned int hooknum) in tcp_error() argument
786 if (net->ct.sysctl_checksum && hooknum == NF_INET_PRE_ROUTING && in tcp_error()
787 nf_checksum(skb, hooknum, dataoff, IPPROTO_TCP, pf)) { in tcp_error()
817 unsigned int hooknum, in tcp_packet() argument
Dnf_tables_api.c993 if (nla_put_be32(skb, NFTA_HOOK_HOOKNUM, htonl(ops->hooknum))) in nf_tables_fill_chain_info()
1345 u32 hooknum, priority; in nf_tables_newchain() local
1364 hooknum = ntohl(nla_get_be32(ha[NFTA_HOOK_HOOKNUM])); in nf_tables_newchain()
1365 if (hooknum >= afi->nhooks) in nf_tables_newchain()
1369 if (!(type->hook_mask & (1 << hooknum))) in nf_tables_newchain()
1373 hookfn = type->hooks[hooknum]; in nf_tables_newchain()
1434 ops->hooknum = hooknum; in nf_tables_newchain()
1437 ops->hook = afi->hooks[ops->hooknum]; in nf_tables_newchain()
4144 if ((1 << basechain->ops[0].hooknum) & hook_flags) in nft_chain_validate_hooks()
Dnf_conntrack_proto_gre.c255 unsigned int hooknum, in gre_packet() argument
Dnf_conntrack_core.c1084 nf_conntrack_in(struct net *net, u_int8_t pf, unsigned int hooknum, in nf_conntrack_in() argument
1126 pf, hooknum); in nf_conntrack_in()
1159 ret = l4proto->packet(ct, skb, dataoff, ctinfo, pf, hooknum, timeouts); in nf_conntrack_in()
Dnf_conntrack_proto_sctp.c328 unsigned int hooknum, in sctp_packet() argument
/linux-4.4.14/net/netfilter/ipvs/
Dip_vs_core.c680 static inline enum ip_defrag_users ip_vs_defrag_user(unsigned int hooknum) in ip_vs_defrag_user() argument
682 if (NF_INET_LOCAL_IN == hooknum) in ip_vs_defrag_user()
684 if (NF_INET_FORWARD == hooknum) in ip_vs_defrag_user()
704 struct sk_buff *skb, unsigned int hooknum) in ip_vs_route_me_harder() argument
709 if (NF_INET_LOCAL_IN == hooknum) in ip_vs_route_me_harder()
844 unsigned int hooknum) in handle_response_icmp() argument
874 if (ip_vs_route_me_harder(cp->ipvs, af, skb, hooknum)) in handle_response_icmp()
899 int *related, unsigned int hooknum) in ip_vs_out_icmp() argument
914 if (ip_vs_gather_frags(ipvs, skb, ip_vs_defrag_user(hooknum))) in ip_vs_out_icmp()
969 pp, ciph.len, ihl, hooknum); in ip_vs_out_icmp()
[all …]
Dip_vs_xmit.c1252 struct ip_vs_protocol *pp, int offset, unsigned int hooknum, in ip_vs_icmp_xmit() argument
1281 rt_mode = (hooknum != NF_INET_FORWARD) ? in ip_vs_icmp_xmit()
1345 struct ip_vs_protocol *pp, int offset, unsigned int hooknum, in ip_vs_icmp_xmit_v6() argument
1373 rt_mode = (hooknum != NF_INET_FORWARD) ? in ip_vs_icmp_xmit_v6()
/linux-4.4.14/net/bridge/netfilter/
Dnf_log_bridge.c20 unsigned int hooknum, in nf_log_bridge_packet() argument
29 nf_log_packet(net, NFPROTO_IPV4, hooknum, skb, in, out, in nf_log_bridge_packet()
33 nf_log_packet(net, NFPROTO_IPV6, hooknum, skb, in, out, in nf_log_bridge_packet()
38 nf_log_packet(net, NFPROTO_ARP, hooknum, skb, in, out, in nf_log_bridge_packet()
Debtable_nat.c77 .hooknum = NF_BR_LOCAL_OUT,
83 .hooknum = NF_BR_POST_ROUTING,
89 .hooknum = NF_BR_PRE_ROUTING,
Debtable_filter.c77 .hooknum = NF_BR_LOCAL_IN,
83 .hooknum = NF_BR_FORWARD,
89 .hooknum = NF_BR_LOCAL_OUT,
Debt_log.c75 ebt_log_packet(struct net *net, u_int8_t pf, unsigned int hooknum, in ebt_log_packet() argument
194 nf_log_packet(net, NFPROTO_BRIDGE, par->hooknum, skb, in ebt_log_tg()
197 ebt_log_packet(net, NFPROTO_BRIDGE, par->hooknum, skb, par->in, in ebt_log_tg()
Debt_nflog.c34 nf_log_packet(net, PF_BRIDGE, par->hooknum, skb, par->in, in ebt_nflog_tg()
Debt_redirect.c26 if (par->hooknum != NF_BR_BROUTING) in ebt_redirect_tg()
Debtables.c207 acpar.hooknum = hook; in ebt_do_table()
/linux-4.4.14/net/ipv4/netfilter/
Dnf_defrag_ipv4.c42 static enum ip_defrag_users nf_ct_defrag_user(unsigned int hooknum, in nf_ct_defrag_user() argument
57 if (hooknum == NF_INET_PRE_ROUTING) in nf_ct_defrag_user()
96 .hooknum = NF_INET_PRE_ROUTING,
102 .hooknum = NF_INET_LOCAL_OUT,
Diptable_nat.c72 .hooknum = NF_INET_PRE_ROUTING,
79 .hooknum = NF_INET_POST_ROUTING,
86 .hooknum = NF_INET_LOCAL_OUT,
93 .hooknum = NF_INET_LOCAL_IN,
Dnf_dup_ipv4.c53 void nf_dup_ipv4(struct net *net, struct sk_buff *skb, unsigned int hooknum, in nf_dup_ipv4() argument
88 if (hooknum == NF_INET_PRE_ROUTING || in nf_dup_ipv4()
89 hooknum == NF_INET_LOCAL_IN) in nf_dup_ipv4()
Dnf_conntrack_proto_icmp.c95 unsigned int hooknum, in icmp_packet() argument
132 unsigned int hooknum) in icmp_error_message() argument
184 enum ip_conntrack_info *ctinfo, u_int8_t pf, unsigned int hooknum) in icmp_error() argument
199 if (net->ct.sysctl_checksum && hooknum == NF_INET_PRE_ROUTING && in icmp_error()
200 nf_ip_checksum(skb, hooknum, dataoff, 0)) { in icmp_error()
228 return icmp_error_message(net, tmpl, skb, ctinfo, hooknum); in icmp_error()
Dnf_conntrack_l3proto_ipv4.c170 .hooknum = NF_INET_PRE_ROUTING,
176 .hooknum = NF_INET_LOCAL_OUT,
182 .hooknum = NF_INET_POST_ROUTING,
188 .hooknum = NF_INET_POST_ROUTING,
194 .hooknum = NF_INET_LOCAL_IN,
200 .hooknum = NF_INET_LOCAL_IN,
Dnf_log_arp.c81 unsigned int hooknum, const struct sk_buff *skb, in nf_log_arp_packet() argument
98 nf_log_dump_packet_common(m, pf, hooknum, skb, in, out, loginfo, in nf_log_arp_packet()
Dnf_nat_masquerade_ipv4.c26 nf_nat_masquerade_ipv4(struct sk_buff *skb, unsigned int hooknum, in nf_nat_masquerade_ipv4() argument
37 NF_CT_ASSERT(hooknum == NF_INET_POST_ROUTING); in nf_nat_masquerade_ipv4()
Dipt_MASQUERADE.c58 return nf_nat_masquerade_ipv4(skb, par->hooknum, &range, par->out); in masquerade_tg()
Dipt_REJECT.c37 int hook = par->hooknum; in reject_tg()
Dnf_nat_l3proto_ipv4.c193 unsigned int hooknum) in nf_nat_icmp_reply_translation() argument
200 enum nf_nat_manip_type manip = HOOK2MANIP(hooknum); in nf_nat_icmp_reply_translation()
210 if (nf_ip_checksum(skb, hooknum, hdrlen, 0)) in nf_nat_icmp_reply_translation()
Dnf_log_ipv4.c313 unsigned int hooknum, const struct sk_buff *skb, in nf_log_ip_packet() argument
330 nf_log_dump_packet_common(m, pf, hooknum, skb, in, in nf_log_ip_packet()
Dipt_SYNPROXY.c269 if (nf_ip_checksum(skb, par->hooknum, par->thoff, IPPROTO_TCP)) in synproxy_tg4()
441 .hooknum = NF_INET_LOCAL_IN,
447 .hooknum = NF_INET_POST_ROUTING,
Dipt_CLUSTERIP.c566 .hooknum = NF_ARP_OUT,
Darp_tables.c291 acpar.hooknum = hook; in arpt_do_table()
Dip_tables.c322 acpar.hooknum = hook; in ipt_do_table()
/linux-4.4.14/security/smack/
Dsmack_netfilter.c64 .hooknum = NF_INET_LOCAL_OUT,
71 .hooknum = NF_INET_LOCAL_OUT,
/linux-4.4.14/include/net/netfilter/ipv6/
Dnf_dup_ipv6.h4 void nf_dup_ipv6(struct net *net, struct sk_buff *skb, unsigned int hooknum,
Dnf_reject.h7 unsigned int hooknum);
/linux-4.4.14/include/net/netfilter/ipv4/
Dnf_dup_ipv4.h4 void nf_dup_ipv4(struct net *net, struct sk_buff *skb, unsigned int hooknum,
Dnf_nat_masquerade.h7 nf_nat_masquerade_ipv4(struct sk_buff *skb, unsigned int hooknum,
/linux-4.4.14/net/bridge/
Dbr_netfilter_hooks.c900 .hooknum = NF_BR_PRE_ROUTING,
906 .hooknum = NF_BR_LOCAL_IN,
912 .hooknum = NF_BR_FORWARD,
918 .hooknum = NF_BR_FORWARD,
924 .hooknum = NF_BR_POST_ROUTING,
930 .hooknum = NF_INET_PRE_ROUTING,
936 .hooknum = NF_INET_PRE_ROUTING,
/linux-4.4.14/net/decnet/netfilter/
Ddn_rtmsg.c119 .hooknum = NF_DN_ROUTE,
/linux-4.4.14/net/sched/
Dem_ipset.c80 acpar.hooknum = 0; in em_ipset_match()
Dact_ipt.c195 par.hooknum = ipt->tcfi_hook; in tcf_ipt()
/linux-4.4.14/include/linux/netfilter/
Dx_tables.h41 unsigned int hooknum; member
/linux-4.4.14/include/linux/
Dnetfilter.h95 unsigned int hooknum; member
/linux-4.4.14/include/net/
Dip_vs.h1438 unsigned int hooknum, struct ip_vs_iphdr *iph);
1452 unsigned int hooknum, struct ip_vs_iphdr *iph);
/linux-4.4.14/security/selinux/
Dhooks.c6134 .hooknum = NF_INET_POST_ROUTING,
6140 .hooknum = NF_INET_FORWARD,
6146 .hooknum = NF_INET_LOCAL_OUT,
6153 .hooknum = NF_INET_POST_ROUTING,
6159 .hooknum = NF_INET_FORWARD,