External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2024-11-02 19:31:18 +00:00
Code Issues Packages Projects Releases Wiki Activity
4a3976211d
libvirt/docs/schemas/nwfilter.rng

876 lines
24 KiB
Plaintext
Raw Normal View History

nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<?xml version="1.0" encoding="UTF-8"?>
<grammar ns="" xmlns="http://relaxng.org/ns/structure/1.0" datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
<start>
<ref name="filter"/>
</start>
<define name="filter">
<element name="filter">
<ref name="filter-node-attributes"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
<optional>
<element name="uuid">
<ref name="UUID"/>
</element>
</optional>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<zeroOrMore>
<choice>
<element name="filterref">
<ref name="filterref-node-attributes"/>
</element>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
<element name="rule">
<ref name="rule-node-attributes"/>
<optional>
<zeroOrMore>
<element name="mac">
<ref name="match-attribute"/>
<ref name="common-l2-attributes"/>
<ref name="mac-attributes"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="arp">
<ref name="match-attribute"/>
<ref name="common-l2-attributes"/>
<ref name="arp-attributes"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="rarp">
<ref name="match-attribute"/>
<ref name="common-l2-attributes"/>
<ref name="arp-attributes"/> <!-- same as arp -->
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="ip">
<ref name="match-attribute"/>
<ref name="common-l2-attributes"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-port-attributes"/>
<ref name="ip-attributes"/>
<ref name="dscp-attribute"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="ipv6">
<ref name="match-attribute"/>
<ref name="common-l2-attributes"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-port-attributes"/>
<ref name="ip-attributes"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="tcp">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-port-attributes"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="udp">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-port-attributes"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="sctp">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-port-attributes"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="icmp">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
<ref name="icmp-attributes"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="igmp">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="all">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="esp">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="ah">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="udplite">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ip-attributes-p1"/>
<ref name="common-ip-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="tcp-ipv6">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-port-attributes"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-ipv6-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="udp-ipv6">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-port-attributes"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-ipv6-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="sctp-ipv6">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-port-attributes"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-ipv6-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="icmpv6">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-ipv6-attributes-p2"/>
<ref name="icmp-attributes"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="all-ipv6">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-ipv6-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="esp-ipv6">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-ipv6-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="ah-ipv6">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-ipv6-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
<optional>
<zeroOrMore>
<element name="udplite-ipv6">
<ref name="match-attribute"/>
<ref name="srcmac-attribute"/>
<ref name="common-ipv6-attributes-p1"/>
<ref name="common-ipv6-attributes-p2"/>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<ref name="comment-attribute"/>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
</element>
</zeroOrMore>
</optional>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</element>
</choice>
</zeroOrMore>
</element>
</define>
<!-- ########### attributes of XML nodes ############ -->
<define name="filter-node-attributes">
<attribute name="name">
<data type="NCName"/>
</attribute>
<optional>
<attribute name="chain">
<choice>
<value>root</value>
<value>arp</value>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
<value>rarp</value>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<value>ipv4</value>
<value>ipv6</value>
</choice>
</attribute>
</optional>
</define>
<define name="filterref-node-attributes">
<attribute name="filter">
<data type="NCName"/>
</attribute>
<optional>
<element name="parameter">
<attribute name="name">
<ref name="filter-param-name"/>
</attribute>
<attribute name="value">
<ref name="filter-param-value"/>
</attribute>
</element>
</optional>
</define>
<define name="rule-node-attributes">
<attribute name="action">
<ref name='action-type'/>
</attribute>
<attribute name="direction">
<ref name='direction-type'/>
</attribute>
<optional>
<attribute name="priority">
<ref name='priority-type'/>
</attribute>
</optional>
nwfilter: add XML attribute to control iptables state match This patch adds an optional XML attribute to a nwfilter rule to give the user control over whether the rule is supposed to be using the iptables state match or not. A rule may now look like shown in the XML below with the statematch attribute either having value '0' or 'false' (case-insensitive). [...] <rule action='accept' direction='in' statematch='false'> <tcp srcmacaddr='1:2:3:4:5:6' srcipaddr='10.1.2.3' srcipmask='32' dscp='33' srcportstart='20' srcportend='21' dstportstart='100' dstportend='1111'/> </rule> [...] I am also extending the nwfilter schema and add this attribute to a test case.
2010-06-17 18:12:34 +00:00
<optional>
<attribute name="statematch">
<ref name='statematch-type'/>
</attribute>
</optional>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</define>
<define name="match-attribute">
<interleave>
<optional>
<attribute name="match">
<choice>
<value>yes</value>
<value>no</value>
</choice>
</attribute>
</optional>
</interleave>
</define>
<define name="srcmac-attribute">
<interleave>
<optional>
<attribute name="srcmacaddr">
<ref name="addrMAC"/>
</attribute>
</optional>
</interleave>
</define>
<define name="common-l2-attributes">
<interleave>
<ref name="srcmac-attribute"/>
<optional>
<attribute name="srcmacmask">
<ref name="addrMAC"/>
</attribute>
</optional>
<optional>
<attribute name="dstmacaddr">
<ref name="addrMAC"/>
</attribute>
</optional>
<optional>
<attribute name="dstmacmask">
<ref name="addrMAC"/>
</attribute>
</optional>
</interleave>
</define>
<define name="common-ip-attributes-p1">
<interleave>
<optional>
<attribute name="srcipaddr">
<ref name="addrIP"/>
</attribute>
</optional>
<optional>
<attribute name="srcipmask">
<ref name="addrMask"/>
</attribute>
</optional>
<optional>
<attribute name="dstipaddr">
<ref name="addrIP"/>
</attribute>
</optional>
<optional>
<attribute name="dstipmask">
<ref name="addrMask"/>
</attribute>
</optional>
</interleave>
</define>
<define name="common-ip-attributes-p2">
<interleave>
<optional>
<attribute name="srcipfrom">
<ref name="addrIP"/>
</attribute>
</optional>
<optional>
<attribute name="srcipto">
<ref name="addrIP"/>
</attribute>
</optional>
<optional>
<attribute name="dstipfrom">
<ref name="addrIP"/>
</attribute>
</optional>
<optional>
<attribute name="dstipto">
<ref name="addrIP"/>
</attribute>
</optional>
<optional>
<attribute name="dscp">
<ref name="sixbitrange"/>
</attribute>
</optional>
nwfilter: extend schema + add testcase w/ connlimit-above I am extending the schema with the recently added connlimit-above attribute and adding a test case for it to the test suite.
2010-04-23 15:42:39 +00:00
<optional>
<attribute name="connlimit-above">
<ref name="uint16range"/>
</attribute>
</optional>
nwfilter: Extend schema to accept state attribute Extend the nwfilter.rng schema to accept state attribute.
2010-10-07 10:44:41 +00:00
<optional>
<attribute name="state">
<ref name="stateflags-type"/>
</attribute>
</optional>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</interleave>
</define>
<define name="common-ipv6-attributes-p1">
<interleave>
<optional>
<attribute name="srcipaddr">
<ref name="addrIPv6"/>
</attribute>
</optional>
<optional>
<attribute name="srcipmask">
<ref name="addrMaskv6"/>
</attribute>
</optional>
<optional>
<attribute name="dstipaddr">
<ref name="addrIPv6"/>
</attribute>
</optional>
<optional>
<attribute name="dstipmask">
<ref name="addrMaskv6"/>
</attribute>
</optional>
</interleave>
</define>
<define name="common-ipv6-attributes-p2">
<interleave>
<optional>
<attribute name="srcipfrom">
<ref name="addrIPv6"/>
</attribute>
</optional>
<optional>
<attribute name="srcipto">
<ref name="addrIPv6"/>
</attribute>
</optional>
<optional>
<attribute name="dstipfrom">
<ref name="addrIPv6"/>
</attribute>
</optional>
<optional>
<attribute name="dstipto">
<ref name="addrIPv6"/>
</attribute>
</optional>
<optional>
<attribute name="dscp">
<ref name="sixbitrange"/>
</attribute>
</optional>
</interleave>
</define>
<define name="common-port-attributes">
<interleave>
<optional>
<attribute name="srcportstart">
<ref name="uint16range"/>
</attribute>
</optional>
<optional>
<attribute name="srcportend">
<ref name="uint16range"/>
</attribute>
</optional>
<optional>
<attribute name="dstportstart">
<ref name="uint16range"/>
</attribute>
</optional>
<optional>
<attribute name="dstportend">
<ref name="uint16range"/>
</attribute>
</optional>
</interleave>
</define>
<define name="icmp-attributes">
<interleave>
<optional>
<attribute name="type">
<ref name="uint8range"/>
</attribute>
</optional>
<optional>
<attribute name="code">
<ref name="uint8range"/>
</attribute>
</optional>
</interleave>
</define>
<define name="mac-attributes">
<interleave>
<optional>
<attribute name="protocolid">
<ref name="mac-protocolid"/>
</attribute>
</optional>
</interleave>
</define>
<define name="arp-attributes">
<interleave>
<optional>
<attribute name="arpsrcmacaddr">
<ref name="addrMAC"/>
</attribute>
</optional>
<optional>
<attribute name="arpsrcipaddr">
<ref name="addrIP"/>
</attribute>
</optional>
<optional>
<attribute name="arpdstmacaddr">
<ref name="addrMAC"/>
</attribute>
</optional>
<optional>
<attribute name="arpdstipaddr">
<ref name="addrIP"/>
</attribute>
</optional>
<optional>
<attribute name="hwtype">
<ref name="uint16range"/>
</attribute>
</optional>
<optional>
<attribute name="opcode">
<ref name="arpOpcodeType"/>
</attribute>
</optional>
<optional>
<attribute name="protocoltype">
<ref name="uint16range"/>
</attribute>
</optional>
</interleave>
</define>
<define name="ip-attributes">
<optional>
<attribute name="protocol">
<ref name="ipProtocolType"/>
</attribute>
</optional>
</define>
<define name="dscp-attribute">
<optional>
<attribute name="dscp">
<ref name="sixbitrange"/>
</attribute>
</optional>
</define>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<define name="comment-attribute">
<optional>
<attribute name="comment">
<ref name="comment-type"/>
</attribute>
</optional>
</define>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<!-- ################ type library ################ -->
<define name="UUID">
<choice>
<data type="string">
<param name="pattern">[a-fA-F0-9]{32}</param>
</data>
<data type="string">
<param name="pattern">[a-fA-F0-9]{8}\-([a-fA-F0-9]{4}\-){3}[a-fA-F0-9]{12}</param>
</data>
</choice>
</define>
<define name="addrMAC">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
<data type="string">
<param name="pattern">([a-fA-F0-9]{1,2}:){5}[a-fA-F0-9]{1,2}</param>
</data>
</choice>
</define>
<define name="addrIP">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
<data type="string">
<param name="pattern">([0-2]?[0-9]?[0-9]\.){3}[0-2]?[0-9]?[0-9]</param>
</data>
</choice>
</define>
<define name="addrIPv6">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
<data type="string">
<param name="pattern">([a-fA-F0-9]{0,4}:){2,7}([a-fA-F0-9]*)(([0-2]?[0-9]?[0-9]\.){3}[0-2]?[0-9]?[0-9])?</param>
</data>
</choice>
</define>
<define name="addrMask">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
<data type="int">
<param name="minInclusive">0</param>
<param name="maxInclusive">32</param>
</data>
<data type="string">
<param name="pattern">([0-2]?[0-9]?[0-9]\.){3}[0-2]?[0-9]?[0-9]</param>
</data>
</choice>
</define>
<define name="addrMaskv6">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
<data type="int">
<param name="minInclusive">0</param>
<param name="maxInclusive">128</param>
</data>
<data type="string">
<param name="pattern">([a-fA-F0-9]{0,4}:){2,7}([a-fA-F0-9]*)</param>
</data>
</choice>
</define>
<define name="sixbitrange">
<choice>
nwfilter: enable hex number inputs in filter XML With this patch I want to enable hex number inputs in the filter XML. A number that was entered as hex is also printed as hex unless a string representing the meaning can be found. I am also extending the schema and adding a test case. A problem with the DSCP value is fixed on the way as well. Changes from V1 to V2: - using asHex boolean in all printf type of functions to select the output format in hex or decimal format
2010-04-26 17:50:40 +00:00
<data type="string">
<param name="pattern">0x([0-3][0-9a-fA-F]|[0-9a-fA-F])</param>
</data>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
<data type="int">
<param name="minInclusive">0</param>
<param name="maxInclusive">63</param>
</data>
</choice>
</define>
<define name="mac-protocolid">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
nwfilter: enable hex number inputs in filter XML With this patch I want to enable hex number inputs in the filter XML. A number that was entered as hex is also printed as hex unless a string representing the meaning can be found. I am also extending the schema and adding a test case. A problem with the DSCP value is fixed on the way as well. Changes from V1 to V2: - using asHex boolean in all printf type of functions to select the output format in hex or decimal format
2010-04-26 17:50:40 +00:00
<data type="string">
<param name="pattern">0x([6-9a-fA-F][0-9a-fA-F]{2}|[0-9a-fA-F]{4})</param>
</data>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<data type="int">
<param name="minInclusive">1536</param>
<param name="maxInclusive">65535</param>
</data>
<choice>
<value>arp</value>
nwfilter: allow to mix filterrefs and rules in the schema So far the references to other filters needed to appear before filtering rules. With the below patch they can now appear in any order. Also I forgot to add a couple of 'rarp's.
2010-04-28 13:12:39 +00:00
<value>rarp</value>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<value>ipv4</value>
<value>ipv6</value>
</choice>
</choice>
</define>
<define name="uint8range">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
nwfilter: enable hex number inputs in filter XML With this patch I want to enable hex number inputs in the filter XML. A number that was entered as hex is also printed as hex unless a string representing the meaning can be found. I am also extending the schema and adding a test case. A problem with the DSCP value is fixed on the way as well. Changes from V1 to V2: - using asHex boolean in all printf type of functions to select the output format in hex or decimal format
2010-04-26 17:50:40 +00:00
<data type="string">
<param name="pattern">0x[0-9a-fA-F]{1,2}</param>
</data>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<data type="int">
<param name="minInclusive">0</param>
<param name="maxInclusive">255</param>
</data>
</choice>
</define>
<define name="uint16range">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
nwfilter: enable hex number inputs in filter XML With this patch I want to enable hex number inputs in the filter XML. A number that was entered as hex is also printed as hex unless a string representing the meaning can be found. I am also extending the schema and adding a test case. A problem with the DSCP value is fixed on the way as well. Changes from V1 to V2: - using asHex boolean in all printf type of functions to select the output format in hex or decimal format
2010-04-26 17:50:40 +00:00
<data type="string">
<param name="pattern">0x[0-9a-fA-F]{1,4}</param>
</data>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<data type="int">
<param name="minInclusive">0</param>
<param name="maxInclusive">65535</param>
</data>
</choice>
</define>
<define name="arpOpcodeType">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
<data type="int">
<param name="minInclusive">0</param>
<param name="maxInclusive">65535</param>
</data>
<data type="string">
<param name="pattern">([Rr]eply|[Rr]equest|[Rr]equest_[Rr]everse|[Rr]eply_[Rr]everse|DRARP_[Rr]equest|DRARP_[Rr]eply|DRARP_[Ee]rror|InARP_[Rr]equest|ARP_NAK)</param>
</data>
</choice>
</define>
<define name="ipProtocolType">
<choice>
<!-- variable -->
<data type="string">
Fix for nwfilter: Add filter schema for nwfilter XML, extend domain XML schema Fixing the regular expressions for variables where the first letter must be a $.
2010-04-06 20:40:49 +00:00
<param name="pattern">$[a-zA-Z0-9_]+</param>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</data>
nwfilter: enable hex number inputs in filter XML With this patch I want to enable hex number inputs in the filter XML. A number that was entered as hex is also printed as hex unless a string representing the meaning can be found. I am also extending the schema and adding a test case. A problem with the DSCP value is fixed on the way as well. Changes from V1 to V2: - using asHex boolean in all printf type of functions to select the output format in hex or decimal format
2010-04-26 17:50:40 +00:00
<data type="string">
<param name="pattern">0x[0-9a-fA-F]{1,2}</param>
</data>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
<data type="int">
<param name="minInclusive">0</param>
<param name="maxInclusive">255</param>
</data>
<choice>
<value>tcp</value>
<value>udp</value>
<value>udplite</value>
<value>esp</value>
<value>ah</value>
<value>icmp</value>
<value>igmp</value>
<value>sctp</value>
<value>icmpv6</value>
</choice>
</choice>
</define>
<define name="filter-param-name">
<data type="string">
<param name="pattern">[a-zA-Z0-9_]+</param>
</data>
</define>
<define name="filter-param-value">
<data type="string">
<param name="pattern">[a-zA-Z0-9_\.:]+</param>
</data>
</define>
<define name='action-type'>
<choice>
<value>drop</value>
<value>accept</value>
nwfilter: enable rejection of packets This patch adds the possibility to not just drop packets, but to also have them rejected where iptables at least sends an ICMP msg back to the originator. On ebtables this again maps into dropping packets since rejecting is not supported. I am adding 'since 0.8.9' to the docs assuming this will be the next version of libvirt.
2011-02-19 01:13:40 +00:00
<value>reject</value>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</choice>
</define>
<define name='direction-type'>
<choice>
<value>in</value>
<value>out</value>
<value>inout</value>
</choice>
</define>
<define name='priority-type'>
<data type="int">
<param name="minInclusive">0</param>
<param name="maxInclusive">1000</param>
</data>
</define>
nwfilter: add XML attribute to control iptables state match This patch adds an optional XML attribute to a nwfilter rule to give the user control over whether the rule is supposed to be using the iptables state match or not. A rule may now look like shown in the XML below with the statematch attribute either having value '0' or 'false' (case-insensitive). [...] <rule action='accept' direction='in' statematch='false'> <tcp srcmacaddr='1:2:3:4:5:6' srcipaddr='10.1.2.3' srcipmask='32' dscp='33' srcportstart='20' srcportend='21' dstportstart='100' dstportend='1111'/> </rule> [...] I am also extending the nwfilter schema and add this attribute to a test case.
2010-06-17 18:12:34 +00:00
<define name='statematch-type'>
<data type="string">
<param name="pattern">([Ff][Aa][Ll][Ss][Ee]|0)</param>
</data>
</define>
nwfilter: Extend nwfilter schema to accept comment attrib. Extend the nwfilter.rng schema to accept comment attributes for all protocol types.
2010-09-30 20:00:11 +00:00
<define name='comment-type'>
<data type="string"/>
</define>
nwfilter: Extend schema to accept state attribute Extend the nwfilter.rng schema to accept state attribute.
2010-10-07 10:44:41 +00:00
<define name='stateflags-type'>
<data type="string">
<param name="pattern">((NEW|ESTABLISHED|RELATED|INVALID)(,(NEW|ESTABLISHED|RELATED|INVALID))*|NONE)</param>
</data>
</define>
nwfilter: Add filter schema for nwfilter XML, extend domain XML schema This patch adds a relaxng nwfilter schema along with a test that verifies all the test output XML against the schema. The input XMLs contain a lot of intentional out-of-range values that make them fail the schema verification, so I am not verifying against those.
2010-04-06 15:09:46 +00:00
</grammar>
Reference in New Issue Copy Permalink