Home
last modified time | relevance | path

Searched full:netfilter (Results 1 – 25 of 473) sorted by relevance

12345678910>>...19

/linux/tools/testing/selftests/bpf/progs/
H A Dverifier_netfilter_ctx.c11 SEC("netfilter")
12 __description("netfilter invalid context access, size too short")
25 SEC("netfilter")
26 __description("netfilter invalid context access, size too short")
39 SEC("netfilter")
40 __description("netfilter invalid context access, past end of ctx")
53 SEC("netfilter")
54 __description("netfilter invalid context, write")
71 SEC("netfilter")
72 __description("netfilter vali
[all...]
/linux/net/netfilter/
H A DKconfig2 menu "Core Netfilter Configuration"
3 depends on INET && NETFILTER
6 bool "Netfilter ingress support"
10 This allows you to classify packets from ingress using the Netfilter
14 bool "Netfilter egress support"
19 Netfilter infrastructure.
37 tristate "Netfilter base hook dump support"
43 to list the base netfilter hooks via NFNETLINK.
47 tristate "Netfilter NFACCT over NFNETLINK interface"
55 tristate "Netfilter NFQUEUE over NFNETLINK interface"
[all …]
H A Dnf_bpf_link.c6 #include <linux/netfilter.h>
8 #include <net/netfilter/nf_bpf_link.h>
157 info->netfilter.pf = nf_link->hook_ops.pf; in bpf_nf_link_fill_link_info()
158 info->netfilter.hooknum = nf_link->hook_ops.hooknum; in bpf_nf_link_fill_link_info()
159 info->netfilter.priority = nf_link->hook_ops.priority; in bpf_nf_link_fill_link_info()
160 info->netfilter.flags = hook ? BPF_F_NETFILTER_IP_DEFRAG : 0; in bpf_nf_link_fill_link_info()
184 switch (attr->link_create.netfilter.pf) { in bpf_nf_check_pf_and_hooks()
187 if (attr->link_create.netfilter.hooknum >= NF_INET_NUMHOOKS) in bpf_nf_check_pf_and_hooks()
194 if (attr->link_create.netfilter.flags & ~BPF_F_NETFILTER_IP_DEFRAG) in bpf_nf_check_pf_and_hooks()
198 prio = attr->link_create.netfilter.priority; in bpf_nf_check_pf_and_hooks()
[all …]
H A Dnf_conntrack_proto_udp.c3 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
17 #include <linux/netfilter.h>
20 #include <net/netfilter/nf_conntrack_l4proto.h>
21 #include <net/netfilter/nf_conntrack_ecache.h>
22 #include <net/netfilter/nf_conntrack_timeout.h>
23 #include <net/netfilter/nf_log.h>
24 #include <net/netfilter/ipv4/nf_conntrack_ipv4.h>
25 #include <net/netfilter/ipv6/nf_conntrack_ipv6.h>
145 #include <linux/netfilter/nfnetlink.h>
146 #include <linux/netfilter/nfnetlink_cttimeout.h>
H A Dxt_LOG.c7 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
22 #include <linux/netfilter.h>
23 #include <linux/netfilter/x_tables.h>
24 #include <linux/netfilter/xt_LOG.h>
26 #include <net/netfilter/nf_log.h>
114 MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>");
H A Dxt_helper.c9 #include <linux/netfilter.h>
10 #include <net/netfilter/nf_conntrack.h>
11 #include <net/netfilter/nf_conntrack_core.h>
12 #include <net/netfilter/nf_conntrack_helper.h>
13 #include <linux/netfilter/x_tables.h>
14 #include <linux/netfilter/xt_helper.h>
17 MODULE_AUTHOR("Martin Josefsson <gandalf@netfilter.org>");
H A Dnf_conntrack_timestamp.c3 * (C) 2010 Pablo Neira Ayuso <pablo@netfilter.org>
8 #include <linux/netfilter.h>
13 #include <net/netfilter/nf_conntrack.h>
14 #include <net/netfilter/nf_conntrack_extend.h>
15 #include <net/netfilter/nf_conntrack_timestamp.h>
H A Dnf_conntrack_acct.c2 /* Accounting handling for netfilter. */
10 #include <linux/netfilter.h>
16 #include <net/netfilter/nf_conntrack.h>
17 #include <net/netfilter/nf_conntrack_extend.h>
18 #include <net/netfilter/nf_conntrack_acct.h>
H A Dxt_MASQUERADE.c6 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org>
10 #include <linux/netfilter/x_tables.h>
11 #include <net/netfilter/nf_nat.h>
12 #include <net/netfilter/nf_nat_masquerade.h>
15 MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>");
H A Dnf_conntrack_tftp.c12 #include <linux/netfilter.h>
14 #include <net/netfilter/nf_conntrack.h>
15 #include <net/netfilter/nf_conntrack_tuple.h>
16 #include <net/netfilter/nf_conntrack_expect.h>
17 #include <net/netfilter/nf_conntrack_ecache.h>
18 #include <net/netfilter/nf_conntrack_helper.h>
19 #include <linux/netfilter/nf_conntrack_tftp.h>
H A Dnf_nat_helper.c4 * (C) 2000-2002 Harald Welte <laforge@netfilter.org>
5 * (C) 2003-2006 Netfilter Core Team <coreteam@netfilter.org>
16 #include <net/netfilter/nf_conntrack.h>
17 #include <net/netfilter/nf_conntrack_helper.h>
18 #include <net/netfilter/nf_conntrack_ecache.h>
19 #include <net/netfilter/nf_conntrack_expect.h>
20 #include <net/netfilter/nf_conntrack_seqadj.h>
21 #include <net/netfilter/nf_nat.h>
22 #include <net/netfilter/nf_nat_helper.h>
H A Dnf_nat_amanda.c3 * (C) 2002 by Brian J. Murrell <netfilter@interlinx.bc.ca>
13 #include <net/netfilter/nf_conntrack_helper.h>
14 #include <net/netfilter/nf_conntrack_expect.h>
15 #include <net/netfilter/nf_nat_helper.h>
16 #include <linux/netfilter/nf_conntrack_amanda.h>
20 MODULE_AUTHOR("Brian J. Murrell <netfilter@interlinx.bc.ca>");
H A Dxt_NFQUEUE.c2 /* iptables module for using new netfilter netlink queue
4 * (C) 2005 by Harald Welte <laforge@netfilter.org>
12 #include <linux/netfilter.h>
14 #include <linux/netfilter/x_tables.h>
15 #include <linux/netfilter/xt_NFQUEUE.h>
17 #include <net/netfilter/nf_queue.h>
19 MODULE_AUTHOR("Harald Welte <laforge@netfilter.org>");
H A Dnf_conntrack_sane.c10 * Based on the FTP conntrack helper (net/netfilter/nf_conntrack_ftp.c):
12 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
21 #include <linux/netfilter.h>
25 #include <net/netfilter/nf_conntrack.h>
26 #include <net/netfilter/nf_conntrack_helper.h>
27 #include <net/netfilter/nf_conntrack_expect.h>
28 #include <linux/netfilter/nf_conntrack_sane.h>
H A Dnft_fib_netdev.c5 * This code is based on net/netfilter/nft_fib_inet.c, written by
13 #include <linux/netfilter.h>
14 #include <linux/netfilter/nf_tables.h>
15 #include <net/netfilter/nf_tables_core.h>
16 #include <net/netfilter/nf_tables.h>
19 #include <net/netfilter/nft_fib.h>
H A Dnf_nat_ftp.c5 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org>
15 #include <net/netfilter/nf_nat.h>
16 #include <net/netfilter/nf_nat_helper.h>
17 #include <net/netfilter/nf_conntrack_helper.h>
18 #include <net/netfilter/nf_conntrack_expect.h>
19 #include <linux/netfilter/nf_conntrack_ftp.h>
H A Dxt_state.c5 * (C) 2002-2005 Netfilter Core Team <coreteam@netfilter.org>
10 #include <net/netfilter/nf_conntrack.h>
11 #include <linux/netfilter/x_tables.h>
12 #include <linux/netfilter/xt_state.h>
H A Dnf_nat_redirect.c4 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org>
17 #include <linux/netfilter.h>
21 #include <linux/netfilter/x_tables.h>
25 #include <net/netfilter/nf_nat.h>
26 #include <net/netfilter/nf_nat_redirect.h>
H A Dxt_REDIRECT.c4 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org>
17 #include <linux/netfilter.h>
21 #include <linux/netfilter/x_tables.h>
25 #include <net/netfilter/nf_nat.h>
26 #include <net/netfilter/nf_nat_redirect.h>
H A Dnf_conntrack_amanda.c4 * (C) 2002 by Brian J. Murrell <netfilter@interlinx.bc.ca>
15 #include <linux/netfilter.h>
18 #include <net/netfilter/nf_conntrack.h>
19 #include <net/netfilter/nf_conntrack_expect.h>
20 #include <net/netfilter/nf_conntrack_ecache.h>
21 #include <net/netfilter/nf_conntrack_helper.h>
22 #include <linux/netfilter/nf_conntrack_amanda.h>
29 MODULE_AUTHOR("Brian J. Murrell <netfilter@interlinx.bc.ca>");
/linux/net/ipv6/netfilter/
H A Dnf_defrag_ipv6_hooks.c3 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
9 #include <linux/netfilter.h>
20 #include <net/netfilter/nf_conntrack.h>
21 #include <net/netfilter/nf_conntrack_helper.h>
22 #include <net/netfilter/nf_conntrack_l4proto.h>
23 #include <net/netfilter/nf_conntrack_core.h>
24 #include <net/netfilter/ipv6/nf_conntrack_ipv6.h>
26 #include <net/netfilter/nf_conntrack_zones.h>
27 #include <net/netfilter/ipv6/nf_defrag_ipv6.h>
/linux/tools/testing/selftests/net/netfilter/
H A Dconntrack_resize.sh23 if ! sysctl -q net.netfilter.nf_conntrack_max >/dev/null;then
28 init_net_max=$(sysctl -n net.netfilter.nf_conntrack_max) || exit 1
29 ct_buckets=$(sysctl -n net.netfilter.nf_conntrack_buckets) || exit 1
37 sysctl -q net.netfilter.nf_conntrack_max=$init_net_max
38 sysctl -q net.netfilter.nf_conntrack_buckets=$ct_buckets
95 sysctl -q net.netfilter.nf_conntrack_buckets=$RANDOM
233 …[ "$r1" -eq 1 ] && ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_icmp_timeout=$((RANDOM…
234 …[ "$r2" -eq 1 ] && ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_udp_timeout=$((RANDOM%…
251 ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_icmp_timeout=30
252 ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_udp_timeout=30
[all …]
/linux/include/net/netfilter/
H A Dnf_conntrack_labels.h6 #include <linux/netfilter/nf_conntrack_common.h>
7 #include <linux/netfilter/nf_conntrack_tuple_common.h>
10 #include <net/netfilter/nf_conntrack.h>
11 #include <net/netfilter/nf_conntrack_extend.h>
12 #include <uapi/linux/netfilter/xt_connlabel.h>
H A Dnf_conntrack_timestamp.h6 #include <linux/netfilter/nf_conntrack_common.h>
7 #include <linux/netfilter/nf_conntrack_tuple_common.h>
8 #include <net/netfilter/nf_conntrack.h>
9 #include <net/netfilter/nf_conntrack_extend.h>
/linux/net/ipv4/netfilter/
H A Dipt_REJECT.c7 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
17 #include <linux/netfilter/x_tables.h>
24 #include <net/netfilter/ipv4/nf_reject.h>
27 MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>");

12345678910>>...19