libvirt/tests/nwfilterxml2firewalldata/ref-rule.xml

<filter name='tck-testcase'>
  <uuid>83011800-f663-96d6-8841-fd836b4318c6</uuid>
  <filterref filter='clean-traffic'/>
  <rule action='accept' direction='out'>
     <mac srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff'
     protocolid='arp'/>
  </rule>
  <rule action='accept' direction='out'>
     <tcp srcmacaddr='1:2:3:4:5:6'
          dstipaddr='10.1.2.3' dstipmask='255.255.255.255'
          dscp='2'/>
  </rule>
  <rule action='accept' direction='out'>
     <udp-ipv6 srcmacaddr='1:2:3:4:5:6'
               dstipaddr='a:b:c::d:e:f' dstipmask='128'
               dscp='2'/>
  </rule>
</filter>
Add a test suite for nwfilter ebiptables tech driver Create a nwfilterxml2firewalltest to exercise the ebiptables_driver.applyNewRules method with a variety of different XML input files. The XML input files are taken from the libvirt-tck nwfilter tests. While the nwfilter tests verify the final state of the iptables chains, this test verifies the set of commands invoked to create the chains. Signed-off-by: Daniel P. Berrange <berrange@redhat.com> 2014-04-01 06:19:38 +00:00			`<filter name='tck-testcase'>`
			`<uuid>83011800-f663-96d6-8841-fd836b4318c6</uuid>`
			`<filterref filter='clean-traffic'/>`
			`<rule action='accept' direction='out'>`
			`<mac srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff'`
			`protocolid='arp'/>`
			`</rule>`
			`<rule action='accept' direction='out'>`
			`<tcp srcmacaddr='1:2:3:4:5:6'`
			`dstipaddr='10.1.2.3' dstipmask='255.255.255.255'`
			`dscp='2'/>`
			`</rule>`
			`<rule action='accept' direction='out'>`
			`<udp-ipv6 srcmacaddr='1:2:3:4:5:6'`
			`dstipaddr='a:b:c::d:e:f' dstipmask='128'`
			`dscp='2'/>`
			`</rule>`
			`</filter>`