NF_INET_LOCAL_IN
.hooknum = NF_INET_LOCAL_IN,
.hooknum = NF_INET_LOCAL_IN,
(hooknum) != NF_INET_LOCAL_IN)
case NF_INET_LOCAL_IN:
case NF_INET_LOCAL_IN:
return NF_HOOK(NFPROTO_IPV4, NF_INET_LOCAL_IN,
[NF_INET_LOCAL_IN] = "INPUT",
.hooks = (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_FORWARD) |
.hooks = (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_FORWARD),
#define FILTER_VALID_HOOKS ((1 << NF_INET_LOCAL_IN) | \
(1 << NF_INET_LOCAL_IN) | \
(1 << NF_INET_LOCAL_IN),
.hooknum = NF_INET_LOCAL_IN,
#define SECURITY_VALID_HOOKS (1 << NF_INET_LOCAL_IN) | \
hooknum == NF_INET_LOCAL_IN)
res = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_IN,
[NF_INET_LOCAL_IN] = "INPUT",
.hooks = (1 << NF_INET_LOCAL_IN) |
.hooks = (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_FORWARD) |
.hooks = (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_FORWARD),
.hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) |
#define FILTER_VALID_HOOKS ((1 << NF_INET_LOCAL_IN) | \
(1 << NF_INET_LOCAL_IN) | \
(1 << NF_INET_LOCAL_IN),
.hooknum = NF_INET_LOCAL_IN,
#define SECURITY_VALID_HOOKS (1 << NF_INET_LOCAL_IN) | \
hooknum == NF_INET_LOCAL_IN) {
return NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_IN,
if (hooknum == NF_INET_LOCAL_IN)
.hooknum = NF_INET_LOCAL_IN,
.hooknum = NF_INET_LOCAL_IN,
.hooknum = NF_INET_LOCAL_IN,
.hooknum = NF_INET_LOCAL_IN,
if (NF_INET_LOCAL_IN == hooknum)
if (NF_INET_LOCAL_IN == hooknum)
.hooknum = NF_INET_LOCAL_IN,
.hooknum = NF_INET_LOCAL_IN,
hooknum = NF_INET_LOCAL_IN; /* Source NAT */
.hooknum = NF_INET_LOCAL_IN,
.hooknum = NF_INET_LOCAL_IN,
.hooknum = NF_INET_LOCAL_IN,
.hooknum = NF_INET_LOCAL_IN,
.hook_mask = (1 << NF_INET_LOCAL_IN) |
[NF_INET_LOCAL_IN] = nft_do_chain_ipv6,
(1 << NF_INET_LOCAL_IN) |
[NF_INET_LOCAL_IN] = nft_do_chain_inet,
.hook_mask = (1 << NF_INET_LOCAL_IN) |
[NF_INET_LOCAL_IN] = nft_do_chain_ipv4,
(1 << NF_INET_LOCAL_IN),
[NF_INET_LOCAL_IN] = nft_nat_do_chain,
(1 << NF_INET_LOCAL_IN),
[NF_INET_LOCAL_IN] = nft_nat_do_chain,
(1 << NF_INET_LOCAL_IN) |
[NF_INET_LOCAL_IN] = nft_nat_do_chain,
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
hooks = (1 << NF_INET_LOCAL_IN) |
hooks = (1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN));
hooks = (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_FORWARD);
hooks = (1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
return nft_chain_validate_hooks(ctx->chain, (1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
if (hook != NF_INET_PRE_ROUTING && hook != NF_INET_LOCAL_IN)
if (hook != NF_INET_PRE_ROUTING && hook != NF_INET_LOCAL_IN)
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
xt_hooknum(par) != NF_INET_LOCAL_IN);
(1 << NF_INET_LOCAL_IN)) &&
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN) |
.hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
.hooks = (1 << NF_INET_LOCAL_IN) |
(1 << NF_INET_LOCAL_IN)) && info->flags & XT_POLICY_MATCH_OUT) {
(1 << NF_INET_LOCAL_OUT) | (1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
(1 << NF_INET_LOCAL_IN),
[NF_INET_LOCAL_IN] = "input",