libvirt/tests/nwfilterxml2firewalldata/conntrack.xml

<filter name='tck-testcase' chain='root'>
  <uuid>0a5288ea-612c-834a-6bbf-82a03a1a3244</uuid>
  <rule action='drop' direction='out' priority='500'>
    <icmp connlimit-above='1'/>
  </rule>
  <rule action='drop' direction='out' priority='500'>
    <tcp connlimit-above='2'/>
  </rule>
  <rule action='accept' direction='out' priority='500'>
    <all/>
  </rule>
</filter>
Add a test suite for nwfilter ebiptables tech driver Create a nwfilterxml2firewalltest to exercise the ebiptables_driver.applyNewRules method with a variety of different XML input files. The XML input files are taken from the libvirt-tck nwfilter tests. While the nwfilter tests verify the final state of the iptables chains, this test verifies the set of commands invoked to create the chains. Signed-off-by: Daniel P. Berrange <berrange@redhat.com> 2014-04-01 06:19:38 +00:00			`<filter name='tck-testcase' chain='root'>`
			`<uuid>0a5288ea-612c-834a-6bbf-82a03a1a3244</uuid>`
			`<rule action='drop' direction='out' priority='500'>`
			`<icmp connlimit-above='1'/>`
			`</rule>`
			`<rule action='drop' direction='out' priority='500'>`
			`<tcp connlimit-above='2'/>`
			`</rule>`
			`<rule action='accept' direction='out' priority='500'>`
			`<all/>`
			`</rule>`
			`</filter>`