Home
last modified time | relevance | path

Searched refs:iptables (Results 1 – 25 of 38) sorted by relevance

12

/linux/tools/testing/selftests/net/netfilter/
H A Drpath.sh6 # search for legacy iptables (it uses the xtables extensions
7 if iptables-legacy --version >/dev/null 2>&1; then
8 iptables='iptables-legacy'
9 elif iptables --version >/dev/null 2>&1; then
10 iptables='iptables'
12 iptables=''
29 if [ -z "$iptables$ip6tables$nft" ]; then
30 echo "SKIP: Test needs iptables, ip6table
[all...]
H A Dxt_string.sh39 iptables -A OUTPUT -o d0 -m string \
43 ip netns exec "$netns" iptables -v -S OUTPUT | grep '^-A'
46 ip netns exec "$netns" iptables -Z OUTPUT
H A Dnf_nat_edemux.sh69 ip netns exec "$ns2" iptables -t nat -A OUTPUT -d 10.96.0.1/32 -p tcp --dport 443 -j DNAT --to-dest…
96 ip netns exec "$ns1" iptables -t nat -A PREROUTING -p tcp --dport 5202 -j REDIRECT --to-ports 5201
97 ip netns exec "$ns1" iptables -t nat -A PREROUTING -p tcp --dport 5203 -j REDIRECT --to-ports 5201
H A Dbr_netfilter_queue.sh54 sysctl net.bridge.bridge-nf-call-iptables=1 || exit 1
H A Dconntrack_ipip_mtu.sh190 ip netns exec "$r_a" iptables -A FORWARD -m conntrack --ctstate NEW
/linux/tools/testing/selftests/net/netfilter/packetdrill/
H A Dconntrack_inexact_rst.pkt17 +0 `iptables -A INPUT -p tcp -m conntrack --ctstate INVALID -j DROP`
18 +0 `iptables -A OUTPUT -p tcp -m conntrack --ctstate INVALID -j DROP`
61 +0 `iptables -v -S INPUT | grep INVALID | grep -q -- "-c 0 0"`
62 +0 `iptables -v -S OUTPUT | grep INVALID | grep -q -- "-c 0 0"`
H A Dconntrack_synack_reuse.pkt8 +0 `iptables -A INPUT -m conntrack --ctstate INVALID -p tcp --tcp-flags SYN,ACK SYN,ACK`
34 +0 `iptables -v -S INPUT | grep INVALID | grep -q -- "-c 0 0"`
/linux/tools/testing/selftests/net/forwarding/
H A Dpedit_ip.sh95 if [ -f /proc/sys/net/bridge/bridge-nf-call-iptables ]; then
96 sysctl_set net.bridge.bridge-nf-call-iptables 0
104 if [ -f /proc/sys/net/bridge/bridge-nf-call-iptables ]; then
105 sysctl_restore net.bridge.bridge-nf-call-iptables
H A Dpedit_dsfield.sh102 if [ -f /proc/sys/net/bridge/bridge-nf-call-iptables ]; then
103 sysctl_set net.bridge.bridge-nf-call-iptables 0
111 if [ -f /proc/sys/net/bridge/bridge-nf-call-iptables ]; then
112 sysctl_restore net.bridge.bridge-nf-call-iptables
/linux/net/ipv4/netfilter/
H A DKconfig20 iptables is a legacy packet classifier.
21 This is not needed if you are using iptables over nftables
22 (iptables-nft).
135 iptables is a general, extensible packet identification framework.
191 local output. See the man page for iptables(8).
222 tristate "iptables NAT support"
229 This enables the `nat' table in iptables. This allows masquerading,
270 This option adds a `mangle' table to iptables: see the man page for
271 iptables(8). This table is used for various packet alterations
281 This option adds a `ECN' target, which can be used in the iptables mangle
[all …]
/linux/Documentation/admin-guide/cgroup-v1/
H A Dnet_cls.rst10 Also, Netfilter (iptables) can use this tag to perform
42 configuring iptables, basic example::
44 iptables -A OUTPUT -m cgroup ! --cgroup 0x100001 -j DROP
/linux/tools/testing/selftests/net/
H A Dbig_tcp_tunnels.sh121 IPTABLES=iptables
128 IPTABLES=iptables
135 IPTABLES_SACK=iptables
190 if ! iptables --version &> /dev/null; then
191 echo "SKIP: Could not run test without iptables tool"
H A Dxfrm_policy.sh185 ip netns exec $ns iptables-save -c |grep policy | ( read c rest
186 ip netns exec $ns iptables -Z
343 iptables --version 2>/dev/null >/dev/null
402 ip netns exec ${ns[3]} iptables -p icmp -A FORWARD -m policy --dir out --pol ipsec
403 ip netns exec ${ns[4]} iptables -p icmp -A FORWARD -m policy --dir out --pol ipsec
H A Dudpgro_fwd.sh112 local ipt=iptables
231 IPT=iptables
H A Dudpgro.sh79 ipt_cmd=iptables
/linux/tools/testing/selftests/net/mptcp/
H A Dmptcp_sockopt.sh18 iptables="iptables"
53 for t in ${iptables} ${ip6tables}; do
108 mptcp_lib_check_tools ip "${iptables}" "${ip6tables}"
115 local tables=${iptables}
H A Dmptcp_join.sh29 iptables="iptables"
199 mptcp_lib_check_tools ip tc ss "${iptables}" "${ip6tables}"
388 tables="${iptables}"
455 tables="${iptables}"
518 if ! ip netns exec "${ns}" ${iptables} \
4318 if ip netns exec "${ns1}" ${iptables} -A INPUT -s "10.0.1.2" \
4320 ip netns exec "${ns2}" ${iptables} -A INPUT -d "10.0.1.2" \
4396 ip netns exec "${ns2}" ${iptables} -D OUTPUT -s "10.0.3.2" -p tcp -j REJECT
4406 ip netns exec "${ns2}" ${iptables} -I OUTPUT -s "10.0.1.2" \
4423 [ ${ipt} = 1 ] && ip netns exec "${ns2}" ${iptables} -D OUTPUT 1
[all …]
/linux/tools/testing/selftests/bpf/prog_tests/
H A Dbpf_nf.c58 const char *iptables = "iptables-legacy -t raw %s PREROUTING -j CONNMARK --set-mark 42/0"; in test_bpf_nf_ct() local
83 snprintf(cmd, sizeof(cmd), iptables, "-A"); in test_bpf_nf_ct()
158 snprintf(cmd, sizeof(cmd), iptables, "-D"); in test_bpf_nf_ct()
/linux/net/ipv6/netfilter/
H A DKconfig17 This is not needed if you are using iptables over nftables
18 (iptables-nft).
205 local output. See the man page for iptables(8).
239 This option adds a `mangle' table to iptables: see the man page for
240 iptables(8). This table is used for various packet alterations
263 This option adds a `security' table to iptables, for use
/linux/samples/bpf/
H A Drun_cookie_uid_helper_example.sh8 iptables -D OUTPUT -m bpf --object-pinned ${mnt_dir}/bpf_prog -j ACCEPT
/linux/net/bridge/netfilter/
H A DKconfig51 (iptables-nft).
146 equivalent of the iptables limit match.
156 This value is the same as the one used in the iptables mark match and
211 This value is the same as the one used in the iptables mark match and
/linux/net/netfilter/
H A DKconfig414 controlled by iptables, ip6tables or nft.
752 required by the legacy tools (iptables-legacy) and is not needed if
753 you use iptables over nftables (iptables-nft).
816 This option adds a `CHECKSUM' target, which can be used in the iptables mangle
822 This target can be used to fill in the checksum using iptables
946 iptables -A INPUT -p tcp --dport 22 -j LED --led-trigger-id ssh --led-delay 1000
961 any iptables table which records the packet header to the syslog.
1083 For it to work you will have to configure certain iptables rules
1132 iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN \
1191 If you say Y or M here, try `iptables -m cluster --help` for
[all …]
/linux/tools/testing/selftests/wireguard/qemu/
H A DMakefile43 $(eval $(call tar_download,IPTABLES,iptables,1.8.7,.tar.bz2,https://www.netfilter.org/projects/iptables/files/,c109c96bb04998cd44156622d36f8e04b140701ec60531a10668cfdff5e8d8f0))
325 echo "file /bin/xtables-legacy-multi $(IPTABLES_PATH)/iptables/xtables-legacy-multi 755 0 0" >> $@
326 echo "slink /bin/iptables xtables-legacy-multi 777 0 0" >> $@
341 $(KERNEL_BZIMAGE): $(TOOLCHAIN_PATH)/.installed $(KERNEL_BUILD_PATH)/.config $(BUILD_PATH)/init-cpio-spec.txt $(IPERF_PATH)/src/iperf3 $(IPUTILS_PATH)/ping $(BASH_PATH)/bash $(IPROUTE2_PATH)/misc/ss $(IPROUTE2_PATH)/ip/ip $(IPTABLES_PATH)/iptables/xtables-legacy-multi $(NMAP_PATH)/ncat/ncat $(WIREGUARD_TOOLS_PATH)/src/wg $(BUILD_PATH)/init
431 $(IPTABLES_PATH)/iptables/xtables-legacy-multi: | $(IPTABLES_PATH)/.installed $(USERSPACE_DEPS)
/linux/Documentation/process/
H A Dchanges.rst49 iptables 1.4.2 iptables -V
338 kernel series (iptables). It still includes backwards-compatibility modules
552 - <https://netfilter.org/projects/iptables/index.html>
/linux/Documentation/
H A DChanges49 iptables 1.4.2 iptables -V
338 kernel series (iptables). It still includes backwards-compatibility modules
552 - <https://netfilter.org/projects/iptables/index.html>

12