| /linux/tools/testing/selftests/bpf/progs/ |
| H A D | verifier_netfilter_ctx.c | 11 SEC("netfilter") 12 __description("netfilter invalid context access, size too short") 25 SEC("netfilter") 26 __description("netfilter invalid context access, size too short") 39 SEC("netfilter") 40 __description("netfilter invalid context access, past end of ctx") 53 SEC("netfilter") 54 __description("netfilter invalid context, write") 71 SEC("netfilter") 72 __description("netfilter vali [all...] |
| /linux/net/netfilter/ |
| H A D | nf_conntrack_extend.c | 4 * Copyright (C) 2007 Netfilter Core Team <coreteam@netfilter.org> 14 #include <net/netfilter/nf_conntrack_extend.h> 16 #include <net/netfilter/nf_conntrack_helper.h> 17 #include <net/netfilter/nf_conntrack_acct.h> 18 #include <net/netfilter/nf_conntrack_seqadj.h> 19 #include <net/netfilter/nf_conntrack_ecache.h> 20 #include <net/netfilter/nf_conntrack_zones.h> 21 #include <net/netfilter/nf_conntrack_timestamp.h> 22 #include <net/netfilter/nf_conntrack_timeout.h> 23 #include <net/netfilter/nf_conntrack_labels.h> [all …]
|
| H A D | nf_bpf_link.c | 6 #include <linux/netfilter.h> 8 #include <net/netfilter/nf_bpf_link.h> 157 info->netfilter.pf = nf_link->hook_ops.pf; in bpf_nf_link_fill_link_info() 158 info->netfilter.hooknum = nf_link->hook_ops.hooknum; in bpf_nf_link_fill_link_info() 159 info->netfilter.priority = nf_link->hook_ops.priority; in bpf_nf_link_fill_link_info() 160 info->netfilter.flags = hook ? BPF_F_NETFILTER_IP_DEFRAG : 0; in bpf_nf_link_fill_link_info() 184 switch (attr->link_create.netfilter.pf) { in bpf_nf_check_pf_and_hooks() 187 if (attr->link_create.netfilter.hooknum >= NF_INET_NUMHOOKS) in bpf_nf_check_pf_and_hooks() 194 if (attr->link_create.netfilter.flags & ~BPF_F_NETFILTER_IP_DEFRAG) in bpf_nf_check_pf_and_hooks() 198 prio = attr->link_create.netfilter.priority; in bpf_nf_check_pf_and_hooks() [all …]
|
| H A D | xt_LOG.c | 7 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org> 22 #include <linux/netfilter.h> 23 #include <linux/netfilter/x_tables.h> 24 #include <linux/netfilter/xt_LOG.h> 26 #include <net/netfilter/nf_log.h> 114 MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>");
|
| H A D | xt_helper.c | 9 #include <linux/netfilter.h> 10 #include <net/netfilter/nf_conntrack.h> 11 #include <net/netfilter/nf_conntrack_core.h> 12 #include <net/netfilter/nf_conntrack_helper.h> 13 #include <linux/netfilter/x_tables.h> 14 #include <linux/netfilter/xt_helper.h> 17 MODULE_AUTHOR("Martin Josefsson <gandalf@netfilter.org>");
|
| H A D | nf_conntrack_timestamp.c | 3 * (C) 2010 Pablo Neira Ayuso <pablo@netfilter.org> 8 #include <linux/netfilter.h> 13 #include <net/netfilter/nf_conntrack.h> 14 #include <net/netfilter/nf_conntrack_extend.h> 15 #include <net/netfilter/nf_conntrack_timestamp.h>
|
| H A D | nf_conntrack_acct.c | 2 /* Accounting handling for netfilter. */ 10 #include <linux/netfilter.h> 16 #include <net/netfilter/nf_conntrack.h> 17 #include <net/netfilter/nf_conntrack_extend.h> 18 #include <net/netfilter/nf_conntrack_acct.h>
|
| H A D | xt_MASQUERADE.c | 6 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org> 10 #include <linux/netfilter/x_tables.h> 11 #include <net/netfilter/nf_nat.h> 12 #include <net/netfilter/nf_nat_masquerade.h> 15 MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>");
|
| H A D | nf_nat_helper.c | 4 * (C) 2000-2002 Harald Welte <laforge@netfilter.org> 5 * (C) 2003-2006 Netfilter Core Team <coreteam@netfilter.org> 16 #include <net/netfilter/nf_conntrack.h> 17 #include <net/netfilter/nf_conntrack_helper.h> 18 #include <net/netfilter/nf_conntrack_ecache.h> 19 #include <net/netfilter/nf_conntrack_expect.h> 20 #include <net/netfilter/nf_conntrack_seqadj.h> 21 #include <net/netfilter/nf_nat.h> 22 #include <net/netfilter/nf_nat_helper.h>
|
| H A D | nf_nat_amanda.c | 3 * (C) 2002 by Brian J. Murrell <netfilter@interlinx.bc.ca> 13 #include <net/netfilter/nf_conntrack_helper.h> 14 #include <net/netfilter/nf_conntrack_expect.h> 15 #include <net/netfilter/nf_nat_helper.h> 16 #include <linux/netfilter/nf_conntrack_amanda.h> 20 MODULE_AUTHOR("Brian J. Murrell <netfilter@interlinx.bc.ca>");
|
| H A D | nf_conntrack_timeout.c | 3 * (C) 2012 by Pablo Neira Ayuso <pablo@netfilter.org> 8 #include <linux/netfilter.h> 19 #include <net/netfilter/nf_conntrack.h> 20 #include <net/netfilter/nf_conntrack_core.h> 21 #include <net/netfilter/nf_conntrack_extend.h> 22 #include <net/netfilter/nf_conntrack_l4proto.h> 23 #include <net/netfilter/nf_conntrack_timeout.h>
|
| H A D | xt_NFQUEUE.c | 2 /* iptables module for using new netfilter netlink queue 4 * (C) 2005 by Harald Welte <laforge@netfilter.org> 12 #include <linux/netfilter.h> 14 #include <linux/netfilter/x_tables.h> 15 #include <linux/netfilter/xt_NFQUEUE.h> 17 #include <net/netfilter/nf_queue.h> 19 MODULE_AUTHOR("Harald Welte <laforge@netfilter.org>");
|
| H A D | nf_conntrack_sane.c | 10 * Based on the FTP conntrack helper (net/netfilter/nf_conntrack_ftp.c): 12 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org> 21 #include <linux/netfilter.h> 25 #include <net/netfilter/nf_conntrack.h> 26 #include <net/netfilter/nf_conntrack_helper.h> 27 #include <net/netfilter/nf_conntrack_expect.h> 28 #include <linux/netfilter/nf_conntrack_sane.h>
|
| H A D | nf_nat_ftp.c | 5 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org> 15 #include <net/netfilter/nf_nat.h> 16 #include <net/netfilter/nf_nat_helper.h> 17 #include <net/netfilter/nf_conntrack_helper.h> 18 #include <net/netfilter/nf_conntrack_expect.h> 19 #include <linux/netfilter/nf_conntrack_ftp.h>
|
| H A D | xt_state.c | 5 * (C) 2002-2005 Netfilter Core Team <coreteam@netfilter.org> 10 #include <net/netfilter/nf_conntrack.h> 11 #include <linux/netfilter/x_tables.h> 12 #include <linux/netfilter/xt_state.h>
|
| H A D | nf_nat_redirect.c | 4 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org> 17 #include <linux/netfilter.h> 21 #include <linux/netfilter/x_tables.h> 25 #include <net/netfilter/nf_nat.h> 26 #include <net/netfilter/nf_nat_redirect.h>
|
| H A D | xt_REDIRECT.c | 4 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org> 17 #include <linux/netfilter.h> 21 #include <linux/netfilter/x_tables.h> 25 #include <net/netfilter/nf_nat.h> 26 #include <net/netfilter/nf_nat_redirect.h>
|
| H A D | xt_nfacct.c | 3 * (C) 2011 Pablo Neira Ayuso <pablo@netfilter.org> 11 #include <linux/netfilter/x_tables.h> 12 #include <linux/netfilter/nfnetlink_acct.h> 13 #include <linux/netfilter/xt_nfacct.h> 15 MODULE_AUTHOR("Pablo Neira Ayuso <pablo@netfilter.org>");
|
| /linux/tools/testing/selftests/net/netfilter/ |
| H A D | conntrack_resize.sh | 23 if ! sysctl -q net.netfilter.nf_conntrack_max >/dev/null;then 28 init_net_max=$(sysctl -n net.netfilter.nf_conntrack_max) || exit 1 29 ct_buckets=$(sysctl -n net.netfilter.nf_conntrack_buckets) || exit 1 37 sysctl -q net.netfilter.nf_conntrack_max=$init_net_max 38 sysctl -q net.netfilter.nf_conntrack_buckets=$ct_buckets 95 sysctl -q net.netfilter.nf_conntrack_buckets=$RANDOM 233 …[ "$r1" -eq 1 ] && ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_icmp_timeout=$((RANDOM… 234 …[ "$r2" -eq 1 ] && ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_udp_timeout=$((RANDOM%… 251 ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_icmp_timeout=30 252 ip netns exec "$ns" sysctl -q net.netfilter.nf_conntrack_udp_timeout=30 [all …]
|
| /linux/net/ipv6/netfilter/ |
| H A D | nf_defrag_ipv6_hooks.c | 3 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org> 9 #include <linux/netfilter.h> 20 #include <net/netfilter/nf_conntrack.h> 21 #include <net/netfilter/nf_conntrack_helper.h> 22 #include <net/netfilter/nf_conntrack_l4proto.h> 23 #include <net/netfilter/nf_conntrack_core.h> 24 #include <net/netfilter/ipv6/nf_conntrack_ipv6.h> 26 #include <net/netfilter/nf_conntrack_zones.h> 27 #include <net/netfilter/ipv6/nf_defrag_ipv6.h>
|
| /linux/net/ |
| H A D | Kconfig | 165 menuconfig NETFILTER config 166 bool "Network packet filtering framework (Netfilter)" 168 Netfilter is a framework for filtering and mangling network packets 201 Another use of Netfilter is in transparent proxying: if a machine on 206 Yet another use of Netfilter is building a bridging firewall. Using 209 protocols over the bridge, use ebtables (under bridge netfilter 212 Various modules exist for netfilter which replace the previous 218 if NETFILTER 221 bool "Advanced netfilter configuration" 222 depends on NETFILTER [all …]
|
| /linux/net/ipv4/netfilter/ |
| H A D | ipt_REJECT.c | 7 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org> 17 #include <linux/netfilter/x_tables.h> 24 #include <net/netfilter/ipv4/nf_reject.h> 27 MODULE_AUTHOR("Netfilter Core Team <coreteam@netfilter.org>");
|
| H A D | nf_nat_pptp.c | 20 * (needs netfilter tuple reservation) 26 #include <net/netfilter/nf_nat.h> 27 #include <net/netfilter/nf_nat_helper.h> 28 #include <net/netfilter/nf_conntrack_helper.h> 29 #include <net/netfilter/nf_conntrack_expect.h> 30 #include <net/netfilter/nf_conntrack_zones.h> 31 #include <linux/netfilter/nf_conntrack_proto_gre.h> 32 #include <linux/netfilter/nf_conntrack_pptp.h> 40 MODULE_DESCRIPTION("Netfilter NAT helper module for PPTP"); 147 * here. current netfilter NAT core is not able to do in pptp_outbound_pkt()
|
| /linux/include/net/netfilter/ |
| H A D | nf_conntrack_labels.h | 6 #include <linux/netfilter/nf_conntrack_common.h> 7 #include <linux/netfilter/nf_conntrack_tuple_common.h> 10 #include <net/netfilter/nf_conntrack.h> 11 #include <net/netfilter/nf_conntrack_extend.h> 12 #include <uapi/linux/netfilter/xt_connlabel.h>
|
| H A D | nf_conntrack_timestamp.h | 6 #include <linux/netfilter/nf_conntrack_common.h> 7 #include <linux/netfilter/nf_conntrack_tuple_common.h> 8 #include <net/netfilter/nf_conntrack.h> 9 #include <net/netfilter/nf_conntrack_extend.h>
|