OSCL-LXR

netfilter.c: look after the filters for various protocols.

count the number of connections matching an arbitrary key.

Accounting handling for netfilter.

Amanda extension for IP connection tracking (C) 2002 by Brian J.

Unstable Conntrack Helpers for XDP and TC-BPF hook These are called from the XDP and SCHED_CLS BPF programs.

broadcast connection tracking helper (c) 2005 Patrick McHardy <trash.net">kaber@trash.net>

Connection state tracking for netfilter. This is separated from, but required by, the NAT layer; it can also be used by an iptables extension.

Event cache for netfilter.

Expectation handling for nf_conntrack.

FTP extension for connection tracking.

SEQUENCE

Helper handling for netfilter.

IRC extension for IP connection tracking, Version 1.21 (C) 2000-2002 by Harald Welte <gnumonks.org">laforge@gnumonks.org> based on RR's ip_conntrack_ftp.c (C) 2006-2012 Patrick McHardy <trash.net">kaber@trash.net>

test/set flag bits stored in conntrack extension area. (C) 2013 Astaro GmbH & Co KG

NetBIOS name service broadcast connection tracking helper (c) 2005 Patrick McHardy <trash.net">kaber@trash.net>

Connection tracking support for PPTP (Point to Point Tunneling Protocol).

C) 1999-2001 Paul `Rusty' Russell (C) 2002-2004 Netfilter Core Team <netfilter.org">coreteam@netfilter.org>

Connection tracking protocol helper module for GRE.

C) 1999-2001 Paul `Rusty' Russell (C) 2002-2004 Netfilter Core Team <netfilter.org">coreteam@netfilter.org> (C) 2006-2010 Patrick McHardy <trash.net">kaber@trash.net>

C) 1999-2001 Paul `Rusty' Russell (C) 2002-2004 Netfilter Core Team <netfilter.org">coreteam@netfilter.org> (C) 2002-2013 Jozsef Kadlecsik <netfilter.org">kadlec@netfilter.org> (C) 2006-2012 Patrick McHardy <trash.net">kaber@trash.net>

C) 1999-2001 Paul `Rusty' Russell (C) 2002-2004 Netfilter Core Team <netfilter.org">coreteam@netfilter.org> (C) 2006-2012 Patrick McHardy <trash.net">kaber@trash.net>

SIP extension for IP connection tracking.

SNMP service broadcast connection tracking helper (c) 2011 Jiri Olsa <redhat.com">jolsa@redhat.com>

C) 2001-2002 Magnus Boden <ozaba.mine.nu">mb@ozaba.mine.nu> (C) 2006-2012 Patrick McHardy <trash.net">kaber@trash.net>

C) 2012 by Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org> (C) 2012 by Vyatta Inc. <vyatta.com">http://www.vyatta.com>

C) 2010 Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org>

C) 1999-2001 Paul `Rusty' Russell (C) 2002-2004 Netfilter Core Team <netfilter.org">coreteam@netfilter.org>

Amanda extension for TCP NAT alteration.

C) 1999-2001 Paul `Rusty' Russell (C) 2002-2006 Netfilter Core Team <netfilter.org">coreteam@netfilter.org> (C) 2011 Patrick McHardy <trash.net">kaber@trash.net>

FTP extension for TCP NAT alteration.

IRC extension for TCP NAT alteration. (C) 2000-2001 by Harald Welte <gnumonks.org">laforge@gnumonks.org> (C) 2004 Rusty Russell <rustcorp.com.au">rusty@rustcorp.com.au> IBM Corporation based on a copy of RR's ip_nat_ftp.c

C) 1999-2001 Paul `Rusty' Russell (C) 2002-2006 Netfilter Core Team <netfilter.org">coreteam@netfilter.org>

SIP extension for NAT alteration.

C) 2001-2002 Magnus Boden <ozaba.mine.nu">mb@ozaba.mine.nu>

Rusty Russell (C)2000 -- This code is GPL. Patrick McHardy (c) 2006-2012

C) 2015 Red Hat GmbH Author: Florian Westphal <strlen.de">fw@strlen.de>

C) 2011 Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org> (C) 2011 Intra2net AG <https://www.intra2net.com>

C) 2012 Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org> This software has been sponsored by Vyatta Inc. <vyatta.com">http://www.vyatta.com>

C) 2012 by Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org> (C) 2012 by Vyatta Inc. <vyatta.com">http://www.vyatta.com>

This is a module which is used for logging packets to userspace via nfetlink.

This is a module which is used for queueing packets and communicating with userspace via nfnetlink.

C) 2012-2013 by Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org> This software has been sponsored by Sophos Astaro <sophos.com">http://www.sophos.com>

Generic part shared by ipv4 and ipv6 backends.

DOC: Theory of Operation Problem Match packet bytes against entries composed of ranged or non-ranged packet field specifiers, mapping them to arbitrary references.

Generic part shared by ipv4 and ipv6 backends.

Creates audit record for dropped/accepted packets (C) 2010-2011 Thomas Graf <redhat.com">tgraf@redhat.com> (C) 2010-2011 Red Hat, Inc.

Xtables module to match the process control group.

iptables module for the packet checksum mangling (C) 2002 by Harald Welte <netfilter.org">laforge@netfilter.org> (C) 2010 Red Hat, Inc. Author: Michael S. Tsirkin <redhat.com">mst@redhat.com>

This is a module which is used for setting the skb->priority field of an skb for qdisc classification.

C) 2008-2009 Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org>

Implements a dummy match to allow attaching comments to rules 2003-05-13 Brad Fisher (brad@info-link.net)

Kernel module to match connection tracking byte counter. GPL (C) 2002 Martin Devera (devik@cdi.cz).

C) 2013 Astaro GmbH & Co KG

netfilter module to limit the number of parallel tcp connections per IP address.

Kernel module to match running CPU

iptables module for DCCP protocol header matching (C) 2005 by Harald Welte <netfilter.org">laforge@netfilter.org>

IP tables module for matching the value of the IPv4/IPv6 DSCP field (C) 2002 by Harald Welte <netfilter.org">laforge@netfilter.org>

x_tables module for setting the IPv4/IPv6 DSCP field, Version 1.8 (C) 2002 by Harald Welte <netfilter.org">laforge@netfilter.org> based on ipt_FTOS.c (C) 2000 by Matthew G.

Xtables module for matching the value of the IPv4/IPv6 and TCP ECN bits (C) 2002 by Harald Welte <gnumonks.org">laforge@gnumonks.org> (C) 2011 Patrick McHardy <trash.net">kaber@trash.net>

Kernel module to match ESP parameters.

iptables module to match on related connections

IP tables module for matching the value of the TTL (C) 2000,2001 by Harald Welte <netfilter.org">laforge@netfilter.org> Hop Limit matching module (C) 2001-2002 Maciej Soltysiak <toxicfilms.tv">solt@dns.toxicfilms.tv>

TTL modification target for IP tables (C) 2000,2005 by Harald Welte <netfilter.org">laforge@netfilter.org> Hop Limit modification target for ip6tables Maciej Soltysiak <toxicfilms.tv">solt@dns.toxicfilms.tv>

xt_HMARK - Netfilter module to set mark by means of hashing (C) 2012 by Hans Schillstrom <ericsson.com">hans.schillstrom@ericsson.com> (C) 2012 by Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org>

xt_iprange - Netfilter module to match IP address ranges (C) 2003 Jozsef Kadlecsik <netfilter.org">kadlec@netfilter.org> (C) CC Computer Consultants GmbH, 2008

xt_ipvs - kernel module to match IPVS connection properties Author: Hannes Eder <google.com">heder@google.com>

Kernel module to match L2TP header parameters.

Kernel module to match packet length.

C) 1999 Jérôme de Vivie <enserb.u-bordeaux.fr">devivie@info.enserb.u-bordeaux.fr> (C) 1999 Hervé Eychenne <enserb.u-bordeaux.fr">eychenne@info.enserb.u-bordeaux.fr> (C) 2006-2012 Patrick McHardy <trash.net">kaber@trash.net>

This is a module which is used for logging packets.

Kernel module to match MAC address parameters.

Masquerade. Simple mapping which alters range to a local IP address (depending on route).

Kernel module to match one of a list of TCP/UDP(-Lite)/SCTP/DCCP ports: ports are in the same place so we can treat them as equal.

C) 1999-2001 Paul `Rusty' Russell (C) 2002-2006 Netfilter Core Team <netfilter.org">coreteam@netfilter.org> (C) 2011 Patrick McHardy <trash.net">kaber@trash.net>

C) 2011 Pablo Neira Ayuso <netfilter.org">pablo@netfilter.org> (C) 2011 Intra2net AG <https://www.intra2net.com>

iptables module for using new netfilter netlink queue (C) 2005 by Harald Welte <netfilter.org">laforge@netfilter.org>

Kernel module to match the bridge port in and out device for IP packets coming into contact with a bridge.

C) 1999-2001 Michal Ludvig <logix.cz">michal@logix.cz>

netfilter module to enforce network quotas Sam Johnston <samj.net">samj@samj.net>

C) 2007 Patrick McHardy <trash.net">kaber@trash.net>

C) 2007 Patrick McHardy <trash.net">kaber@trash.net>

IP tables module for matching the routing realm (C) 2003 by Sampsa Ranta <netsonic.fi">sampsa@netsonic.fi>

Today's hack: quantum tunneling in structs 'entries' and 'term' are never anywhere referenced by word in code. In fact, they serve as the hanging-off data accessed through repl.data[].

Module for modifying the secmark field of the skb, for use by security subsystems.

Kernel module which implements the set match and SET target for netfilter/iptables.

Kernel module to match connection tracking information.

String matching match for iptables (C) 2005 Pablo Neira Ayuso <eurodev.net">pablo@eurodev.net>

This is a module which is used to mark packets for tracing.

xt_u32 - kernel module to match u32 packet content Original author: Don Cohen <isis.cs3-inc.com">don@isis.cs3-inc.com> (C) CC Computer Consultants GmbH, 2007