| /net/netfilter/ |
| A D | nft_fib.c | 32 unsigned int hooks; in nft_fib_validate() local 37 hooks = (1 << NF_INET_PRE_ROUTING) | in nft_fib_validate() 43 hooks = (1 << NF_INET_PRE_ROUTING) | in nft_fib_validate() 47 hooks = (1 << NF_INET_LOCAL_OUT) | in nft_fib_validate() 51 hooks = (1 << NF_INET_LOCAL_IN) | in nft_fib_validate() 62 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_fib_validate()
|
| A D | xt_socket.c | 235 .hooks = (1 << NF_INET_PRE_ROUTING) | 247 .hooks = (1 << NF_INET_PRE_ROUTING) | 260 .hooks = (1 << NF_INET_PRE_ROUTING) | 273 .hooks = (1 << NF_INET_PRE_ROUTING) | 286 .hooks = (1 << NF_INET_PRE_ROUTING) | 299 .hooks = (1 << NF_INET_PRE_ROUTING) | 312 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| A D | core.c | 153 new->hooks[nhooks] = old->hooks[i]; in nf_hook_entries_grow() 157 new->hooks[nhooks].hook = reg->hook; in nf_hook_entries_grow() 158 new->hooks[nhooks].priv = reg->priv; in nf_hook_entries_grow() 166 new->hooks[nhooks].hook = reg->hook; in nf_hook_entries_grow() 167 new->hooks[nhooks].priv = reg->priv; in nf_hook_entries_grow() 173 static void hooks_validate(const struct nf_hook_entries *hooks) in hooks_validate() argument 180 orig_ops = nf_hook_entries_get_hook_ops(hooks); in hooks_validate() 182 for (i = 0; i < hooks->num_hook_entries; i++) { in hooks_validate() 265 new->hooks[j] = old->hooks[i]; in __nf_hook_entries_try_shrink() 477 WRITE_ONCE(old->hooks[i].hook, accept_all); in nf_remove_net_hook() [all …]
|
| A D | nf_conntrack_sip.c | 863 const struct nf_nat_sip_hooks *hooks; in set_expected_rtp_rtcp() local 950 if (hooks && in set_expected_rtp_rtcp() 1039 const struct nf_nat_sip_hooks *hooks; in process_sdp() local 1128 if (hooks && ct->status & IPS_NAT_MASK) in process_sdp() 1231 const struct nf_nat_sip_hooks *hooks; in process_register_request() local 1304 if (hooks && ct->status & IPS_NAT_MASK) in process_register_request() 1512 const struct nf_nat_sip_hooks *hooks; in process_sip_msg() local 1522 if (hooks && !hooks->msg(skb, protoff, dataoff, in process_sip_msg() 1606 const struct nf_nat_sip_hooks *hooks; in sip_help_tcp() local 1609 if (hooks) in sip_help_tcp() [all …]
|
| A D | xt_nat.c | 160 .hooks = (1 << NF_INET_POST_ROUTING) | 173 .hooks = (1 << NF_INET_PRE_ROUTING) | 185 .hooks = (1 << NF_INET_POST_ROUTING) | 197 .hooks = (1 << NF_INET_PRE_ROUTING) | 209 .hooks = (1 << NF_INET_POST_ROUTING) | 221 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| A D | nft_meta.c | 541 unsigned int hooks; in nft_meta_get_validate_sdif() local 547 hooks = (1 << NF_INET_LOCAL_IN) | in nft_meta_get_validate_sdif() 554 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_meta_get_validate_sdif() 560 unsigned int hooks; in nft_meta_get_validate_xfrm() local 564 hooks = 1 << NF_NETDEV_INGRESS; in nft_meta_get_validate_xfrm() 569 hooks = (1 << NF_INET_PRE_ROUTING) | in nft_meta_get_validate_xfrm() 577 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_meta_get_validate_xfrm() 605 unsigned int hooks; in nft_meta_set_validate() local 612 hooks = 1 << NF_BR_PRE_ROUTING; in nft_meta_set_validate() 615 hooks = 1 << NF_NETDEV_INGRESS; in nft_meta_set_validate() [all …]
|
| A D | xt_CLASSIFY.c | 42 .hooks = (1 << NF_INET_LOCAL_OUT) | (1 << NF_INET_FORWARD) | 52 .hooks = (1 << NF_ARP_OUT) | (1 << NF_ARP_FORWARD), 62 .hooks = (1 << NF_INET_LOCAL_OUT) | (1 << NF_INET_FORWARD) |
|
| A D | nft_chain_filter.c | 35 .hooks = { 77 .hooks = { 119 .hooks = { 205 .hooks = { 263 .hooks = { 315 .hooks = {
|
| A D | nft_chain_nat.c | 45 .hooks = { 66 .hooks = { 97 .hooks = {
|
| A D | nft_chain_route.c | 58 .hooks = { 108 .hooks = { 139 .hooks = {
|
| A D | nft_xfrm.c | 236 unsigned int hooks; in nft_xfrm_validate() local 245 hooks = (1 << NF_INET_FORWARD) | in nft_xfrm_validate() 250 hooks = (1 << NF_INET_FORWARD) | in nft_xfrm_validate() 259 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_xfrm_validate()
|
| A D | nft_rt.c | 166 unsigned int hooks; in nft_rt_validate() local 180 hooks = (1 << NF_INET_FORWARD) | in nft_rt_validate() 188 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_rt_validate()
|
| A D | nft_osf.c | 113 unsigned int hooks; in nft_osf_validate() local 119 hooks = (1 << NF_INET_LOCAL_IN) | in nft_osf_validate() 127 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_osf_validate()
|
| A D | xt_cgroup.c | 200 .hooks = (1 << NF_INET_LOCAL_OUT) | 214 .hooks = (1 << NF_INET_LOCAL_OUT) | 228 .hooks = (1 << NF_INET_LOCAL_OUT) |
|
| A D | xt_REDIRECT.c | 87 .hooks = (1 << NF_INET_PRE_ROUTING) | 100 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| A D | xt_TPROXY.c | 221 .hooks = 1 << NF_INET_PRE_ROUTING, 233 .hooks = 1 << NF_INET_PRE_ROUTING, 246 .hooks = 1 << NF_INET_PRE_ROUTING,
|
| A D | xt_MASQUERADE.c | 80 .hooks = 1 << NF_INET_POST_ROUTING, 91 .hooks = 1 << NF_INET_POST_ROUTING,
|
| A D | nfnetlink_queue.c | 232 const struct nf_hook_entries *hooks, in nf_iterate() argument 238 while (i < hooks->num_hook_entries) { in nf_iterate() 239 hook = &hooks->hooks[i]; in nf_iterate() 315 const struct nf_hook_entries *hooks; in nf_reinject() local 325 hooks = nf_hook_entries_head(net, pf, entry->state.hook); in nf_reinject() 328 if (!hooks || i >= hooks->num_hook_entries) { in nf_reinject() 334 hook_entry = &hooks->hooks[i]; in nf_reinject() 348 verdict = nf_iterate(skb, &entry->state, hooks, &i); in nf_reinject()
|
| A D | xt_NETMAP.c | 127 .hooks = (1 << NF_INET_PRE_ROUTING) | 142 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
| A D | xt_l2tp.c | 321 .hooks = ((1 << NF_INET_PRE_ROUTING) | 335 .hooks = ((1 << NF_INET_PRE_ROUTING) |
|
| A D | xt_realm.c | 34 .hooks = (1 << NF_INET_POST_ROUTING) | (1 << NF_INET_FORWARD) |
|
| A D | xt_osf.c | 39 .hooks = (1 << NF_INET_LOCAL_IN) |
|
| A D | xt_mac.c | 47 .hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) |
|
| /net/bridge/netfilter/ |
| A D | nft_meta_bridge.c | 174 unsigned int hooks; in nft_meta_bridge_set_validate() local 178 hooks = 1 << NF_BR_PRE_ROUTING; in nft_meta_bridge_set_validate() 184 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_meta_bridge_set_validate()
|
| /net/ipv6/netfilter/ |
| A D | ip6t_NPT.c | 154 .hooks = (1 << NF_INET_LOCAL_IN) | 166 .hooks = (1 << NF_INET_PRE_ROUTING) |
|