ipv4/netfilter/nf_reject_ipv4.c

45 	struct sk_buff *nskb;
56 	nskb = alloc_skb(sizeof(struct iphdr) + sizeof(struct tcphdr) +
58 	if (!nskb)
61 	nskb->dev = (struct net_device *)dev;
63 	skb_reserve(nskb, LL_MAX_HEADER);
64 	niph = nf_reject_iphdr_put(nskb, oldskb, IPPROTO_TCP,
66 	nf_reject_ip_tcphdr_put(nskb, oldskb, oth);
67 	niph->tot_len = htons(nskb->len);
70 	return nskb;
79 	struct sk_buff *nskb;
111 	nskb = alloc_skb(sizeof(struct iphdr) + sizeof(struct icmphdr) +
113 	if (!nskb)
116 	nskb->dev = (struct net_device *)dev;
118 	skb_reserve(nskb, LL_MAX_HEADER);
119 	niph = nf_reject_iphdr_put(nskb, oldskb, IPPROTO_ICMP,
122 	skb_reset_transport_header(nskb);
123 	icmph = skb_put_zero(nskb, sizeof(struct icmphdr));
127 	skb_put_data(nskb, skb_network_header(oldskb), len);
132 	niph->tot_len	= htons(nskb->len);
135 	return nskb;
168 struct iphdr *nf_reject_iphdr_put(struct sk_buff *nskb,
174 	skb_reset_network_header(nskb);
175 	niph = skb_put(nskb, sizeof(struct iphdr));
187 	nskb->protocol = htons(ETH_P_IP);
193 void nf_reject_ip_tcphdr_put(struct sk_buff *nskb, const struct sk_buff *oldskb,
196 	struct iphdr *niph = ip_hdr(nskb);
199 	skb_reset_transport_header(nskb);
200 	tcph = skb_put_zero(nskb, sizeof(struct tcphdr));
217 	nskb->ip_summed = CHECKSUM_PARTIAL;
218 	nskb->csum_start = (unsigned char *)tcph - nskb->head;
219 	nskb->csum_offset = offsetof(struct tcphdr, check);
242 	struct sk_buff *nskb;
258 	nskb = alloc_skb(sizeof(struct iphdr) + sizeof(struct tcphdr) +
260 	if (!nskb)
264 	skb_dst_set_noref(nskb, skb_dst(oldskb));
266 	nskb->mark = IP4_REPLY_MARK(net, oldskb->mark);
268 	skb_reserve(nskb, LL_MAX_HEADER);
269 	niph = nf_reject_iphdr_put(nskb, oldskb, IPPROTO_TCP,
270 				   ip4_dst_hoplimit(skb_dst(nskb)));
271 	nf_reject_ip_tcphdr_put(nskb, oldskb, oth);
272 	if (ip_route_me_harder(net, sk, nskb, RTN_UNSPEC))
275 	niph = ip_hdr(nskb);
278 	if (nskb->len > dst_mtu(skb_dst(nskb)))
281 	nf_ct_attach(nskb, oldskb);
299 		nskb->dev = br_indev;
300 		niph->tot_len = htons(nskb->len);
302 		if (dev_hard_header(nskb, nskb->dev, ntohs(nskb->protocol),
303 				    oeth->h_source, oeth->h_dest, nskb->len) < 0)
305 		dev_queue_xmit(nskb);
308 		ip_local_out(net, nskb->sk, nskb);
313 	kfree_skb(nskb);