net/bridge/netfilter/nft_reject_bridge.c

Source file repositories/reference/linux-study-clean/net/bridge/netfilter/nft_reject_bridge.c

File Facts

System: Linux kernel
Corpus path: net/bridge/netfilter/nft_reject_bridge.c
Extension: .c
Size: 5647 bytes
Lines: 215
Domain: Networking Core
Bucket: Sockets, Protocols, Packet Path, And Network Policy
Inferred role: Networking Core: exported/initcall integration point
Status: integration implementation candidate

Why This File Exists

Networking stack implementation surface: socket APIs, protocol dispatch, packet flow, routing, filtering, and network namespaces.

Networking stack implementation surface: socket APIs, protocol dispatch, packet flow, routing, filtering, and network namespaces.
Exports symbols or registers init work; inspect boot/module ordering and who consumes the exported contract.
Defines or uses C structs; map object ownership, embedded links, reference counts, and lock ownership.

Dependency Surface

linux/kernel.h
linux/init.h
linux/module.h
linux/netlink.h
linux/netfilter.h
linux/netfilter/nf_tables.h
net/netfilter/nf_tables.h
net/netfilter/nft_reject.h
net/netfilter/ipv4/nf_reject.h
net/netfilter/ipv6/nf_reject.h
linux/ip.h
net/ip.h
net/ip6_checksum.h
linux/netfilter_bridge.h
linux/netfilter_ipv6.h
../br_private.h

Detected Declarations

function Copyright
function port
function nft_reject_br_send_v4_unreach
function nft_reject_br_send_v6_tcp_reset
function nft_reject_br_send_v6_unreach
function nft_reject_bridge_eval
function htons
function nft_reject_bridge_validate
function nft_reject_bridge_module_init
function nft_reject_bridge_module_exit
module init nft_reject_bridge_module_init

Annotated Snippet

module_init(nft_reject_bridge_module_init);
module_exit(nft_reject_bridge_module_exit);

MODULE_LICENSE("GPL");
MODULE_AUTHOR("Pablo Neira Ayuso <pablo@netfilter.org>");
MODULE_ALIAS_NFT_AF_EXPR(AF_BRIDGE, "reject");
MODULE_DESCRIPTION("Reject packets from bridge via nftables");

Annotation

Immediate include surface: `linux/kernel.h`, `linux/init.h`, `linux/module.h`, `linux/netlink.h`, `linux/netfilter.h`, `linux/netfilter/nf_tables.h`, `net/netfilter/nf_tables.h`, `net/netfilter/nft_reject.h`.
Detected declarations: `function Copyright`, `function port`, `function nft_reject_br_send_v4_unreach`, `function nft_reject_br_send_v6_tcp_reset`, `function nft_reject_br_send_v6_unreach`, `function nft_reject_bridge_eval`, `function htons`, `function nft_reject_bridge_validate`, `function nft_reject_bridge_module_init`, `function nft_reject_bridge_module_exit`.
Atlas domain: Networking Core / Sockets, Protocols, Packet Path, And Network Policy.
Implementation status: integration implementation candidate.

Implementation Notes

This generated page is the file-by-file coverage layer; curated subsystem chapters should link here when they synthesize a multi-file control flow.
Core OS pages should be promoted from atlas-only to deep-reviewed when they explain data structures, invariants, locking, lifecycle, and C implementation snippets.
Driver-family pages are intentionally pattern-oriented unless they are part of the selected PCIe/NVMe representative device path.