diff --git a/tests/nwfilterxml2xmlin/icmp-direction-test.xml b/tests/nwfilterxml2xmlin/icmp-direction-test.xml
new file mode 100644
index 0000000000..a692d2a4e5
--- /dev/null
+++ b/tests/nwfilterxml2xmlin/icmp-direction-test.xml
@@ -0,0 +1,15 @@
+<filter name='testcase'>
+    <uuid>f4b3f745-d23d-2ee6-218a-d5671611229b</uuid>
+    <!-- allow incoming ICMP Echo Reply -->
+    <rule action='accept' direction='in' priority='500'>
+        <icmp type='0'/>
+    </rule>
+    <!-- allow outgoing ICMP Echo Request -->
+    <rule action='accept' direction='out' priority='500'>
+        <icmp type='8'/>
+    </rule>
+    <!-- drop all other ICMP traffic -->
+    <rule action='drop' direction='inout' priority='600'>
+        <icmp/>
+    </rule>
+</filter>
diff --git a/tests/nwfilterxml2xmlin/icmp-direction2-test.xml b/tests/nwfilterxml2xmlin/icmp-direction2-test.xml
new file mode 100644
index 0000000000..13963487cc
--- /dev/null
+++ b/tests/nwfilterxml2xmlin/icmp-direction2-test.xml
@@ -0,0 +1,15 @@
+<filter name='testcase'>
+    <uuid>d6b1a2af-def6-2898-9f8d-4a74e3c39558</uuid>
+    <!-- allow incoming ICMP Echo Request -->
+    <rule action='accept' direction='in' priority='500'>
+        <icmp type='8'/>
+    </rule>
+    <!-- allow outgoing ICMP Echo Reply -->
+    <rule action='accept' direction='out' priority='500'>
+        <icmp type='0'/>
+    </rule>
+    <!-- drop all other ICMP traffic -->
+    <rule action='drop' direction='inout' priority='600'>
+        <icmp/>
+    </rule>
+</filter>
diff --git a/tests/nwfilterxml2xmlin/icmp-direction3-test.xml b/tests/nwfilterxml2xmlin/icmp-direction3-test.xml
new file mode 100644
index 0000000000..b5e3dcd862
--- /dev/null
+++ b/tests/nwfilterxml2xmlin/icmp-direction3-test.xml
@@ -0,0 +1,10 @@
+<filter name='testcase'>
+    <uuid>d6b1a2af-def6-2898-9f8d-4a74e3c39558</uuid>
+    <rule action='accept' direction='out' priority='500'>
+        <icmp/>
+    </rule>
+    <!-- drop all other traffic -->
+    <rule action='drop' direction='inout' priority='600'>
+        <all/>
+    </rule>
+</filter>
diff --git a/tests/nwfilterxml2xmlin/ipt-no-macspoof-test.xml b/tests/nwfilterxml2xmlin/ipt-no-macspoof-test.xml
new file mode 100644
index 0000000000..ab78bd1619
--- /dev/null
+++ b/tests/nwfilterxml2xmlin/ipt-no-macspoof-test.xml
@@ -0,0 +1,14 @@
+<filter name='testcase'>
+  <uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid>
+  <rule action='drop' direction='inout'>
+     <!-- should use $MAC for MAC address, but tests would depend on VM's
+          MAC address -->
+     <all match='no' srcmacaddr='12:34:56:78:9a:bc'/>
+  </rule>
+
+  <rule action='drop' direction='in'>
+     <!-- not accepting incoming traffic from a certain MAC address -->
+     <all match='no' srcmacaddr='aa:aa:aa:aa:aa:aa'/>
+  </rule>
+
+</filter>
diff --git a/tests/nwfilterxml2xmlout/icmp-direction-test.xml b/tests/nwfilterxml2xmlout/icmp-direction-test.xml
new file mode 100644
index 0000000000..1022adbc5c
--- /dev/null
+++ b/tests/nwfilterxml2xmlout/icmp-direction-test.xml
@@ -0,0 +1,12 @@
+<filter name='testcase' chain='root'>
+  <uuid>f4b3f745-d23d-2ee6-218a-d5671611229b</uuid>
+  <rule action='accept' direction='in' priority='500'>
+    <icmp type='0'/>
+  </rule>
+  <rule action='accept' direction='out' priority='500'>
+    <icmp type='8'/>
+  </rule>
+  <rule action='drop' direction='inout' priority='600'>
+    <icmp/>
+  </rule>
+</filter>
diff --git a/tests/nwfilterxml2xmlout/icmp-direction2-test.xml b/tests/nwfilterxml2xmlout/icmp-direction2-test.xml
new file mode 100644
index 0000000000..2314b2db87
--- /dev/null
+++ b/tests/nwfilterxml2xmlout/icmp-direction2-test.xml
@@ -0,0 +1,12 @@
+<filter name='testcase' chain='root'>
+  <uuid>d6b1a2af-def6-2898-9f8d-4a74e3c39558</uuid>
+  <rule action='accept' direction='in' priority='500'>
+    <icmp type='8'/>
+  </rule>
+  <rule action='accept' direction='out' priority='500'>
+    <icmp type='0'/>
+  </rule>
+  <rule action='drop' direction='inout' priority='600'>
+    <icmp/>
+  </rule>
+</filter>
diff --git a/tests/nwfilterxml2xmlout/icmp-direction3-test.xml b/tests/nwfilterxml2xmlout/icmp-direction3-test.xml
new file mode 100644
index 0000000000..31daef3a5c
--- /dev/null
+++ b/tests/nwfilterxml2xmlout/icmp-direction3-test.xml
@@ -0,0 +1,9 @@
+<filter name='testcase' chain='root'>
+  <uuid>d6b1a2af-def6-2898-9f8d-4a74e3c39558</uuid>
+  <rule action='accept' direction='out' priority='500'>
+    <icmp/>
+  </rule>
+  <rule action='drop' direction='inout' priority='600'>
+    <all/>
+  </rule>
+</filter>
diff --git a/tests/nwfilterxml2xmlout/ipt-no-macspoof-test.xml b/tests/nwfilterxml2xmlout/ipt-no-macspoof-test.xml
new file mode 100644
index 0000000000..218ce4da4a
--- /dev/null
+++ b/tests/nwfilterxml2xmlout/ipt-no-macspoof-test.xml
@@ -0,0 +1,9 @@
+<filter name='testcase' chain='root'>
+  <uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid>
+  <rule action='drop' direction='inout' priority='500'>
+    <all match='no' srcmacaddr='12:34:56:78:9a:bc'/>
+  </rule>
+  <rule action='drop' direction='in' priority='500'>
+    <all match='no' srcmacaddr='aa:aa:aa:aa:aa:aa'/>
+  </rule>
+</filter>
diff --git a/tests/nwfilterxml2xmltest.c b/tests/nwfilterxml2xmltest.c
index 8a8c15a575..4dcda26315 100644
--- a/tests/nwfilterxml2xmltest.c
+++ b/tests/nwfilterxml2xmltest.c
@@ -114,6 +114,10 @@ mymain(int argc, char **argv)
 
     DO_TEST("ref-test");
     DO_TEST("ref-rule-test");
+    DO_TEST("ipt-no-macspoof-test");
+    DO_TEST("icmp-direction-test");
+    DO_TEST("icmp-direction2-test");
+    DO_TEST("icmp-direction3-test");
 
     return (ret==0 ? EXIT_SUCCESS : EXIT_FAILURE);
 }