net/netfilter/nf_nat_proto.c

16 #include <net/sctp/checksum.h>
19 #include <net/netfilter/nf_nat.h>
23 #include <net/checksum.h>
24 #include <net/ip6_checksum.h>
25 #include <net/ip6_route.h>
26 #include <net/xfrm.h>
27 #include <net/ipv6.h>
29 #include <net/netfilter/nf_conntrack_core.h>
30 #include <net/netfilter/nf_conntrack.h>
663 static int nf_xfrm_me_harder(struct net *net, struct sk_buff *skb, unsigned int family)
671 	err = xfrm_decode_session(net, skb, &fl, family);
681 	if (sk && !net_eq(net, sock_net(sk)))
684 	dst = xfrm_lookup(net, dst, &fl, sk, 0);
782 			err = nf_xfrm_me_harder(state->net, skb, AF_INET);
810 			err = ip_route_me_harder(state->net, state->sk, skb, RTN_UNSPEC);
819 			err = nf_xfrm_me_harder(state->net, skb, AF_INET);
859 int nf_nat_ipv4_register_fn(struct net *net, const struct nf_hook_ops *ops)
861 	return nf_nat_register_fn(net, ops->pf, ops, nf_nat_ipv4_ops,
866 void nf_nat_ipv4_unregister_fn(struct net *net, const struct nf_hook_ops *ops)
868 	nf_nat_unregister_fn(net, ops->pf, ops, ARRAY_SIZE(nf_nat_ipv4_ops));
1041 			err = nf_xfrm_me_harder(state->net, skb, AF_INET6);
1070 			err = nf_ip6_route_me_harder(state->net, state->sk, skb);
1079 			err = nf_xfrm_me_harder(state->net, skb, AF_INET6);
1120 int nf_nat_ipv6_register_fn(struct net *net, const struct nf_hook_ops *ops)
1122 	return nf_nat_register_fn(net, ops->pf, ops, nf_nat_ipv6_ops,
1127 void nf_nat_ipv6_unregister_fn(struct net *net, const struct nf_hook_ops *ops)
1129 	nf_nat_unregister_fn(net, ops->pf, ops, ARRAY_SIZE(nf_nat_ipv6_ops));
1135 int nf_nat_inet_register_fn(struct net *net, const struct nf_hook_ops *ops)
1142 	ret = nf_nat_register_fn(net, NFPROTO_IPV6, ops, nf_nat_ipv6_ops,
1147 	ret = nf_nat_register_fn(net, NFPROTO_IPV4, ops, nf_nat_ipv4_ops,
1150 		nf_nat_unregister_fn(net, NFPROTO_IPV6, ops,
1156 void nf_nat_inet_unregister_fn(struct net *net, const struct nf_hook_ops *ops)
1158 	nf_nat_unregister_fn(net, NFPROTO_IPV4, ops, ARRAY_SIZE(nf_nat_ipv4_ops));
1159 	nf_nat_unregister_fn(net, NFPROTO_IPV6, ops, ARRAY_SIZE(nf_nat_ipv6_ops));