libvirt/tests/nwfilterxml2firewalldata/example-2-linux.args
Daniel P. Berrange 8afd34f2d8 tests: redo test argv file line wrapping
Back in

  commit bd6c46fa0c
  Author: Juerg Haefliger <juerg.haefliger@hp.com>
  Date:   Mon Jan 31 06:42:57 2011 -0500

    tests: handle backspace-newline pairs in test input files

all the test argv files were line wrapped so that the args
were less than 80 characters.

The way the line wrapping was done turns out to be quite
undesirable, because it often leaves multiple parameters
on the same line. If we later need to add or remove
individual parameters, then it leaves us having to redo
line wrapping.

This commit changes the line wrapping so that every
single "-param value" is one its own new line. If the
"value" is still too long, then we break on ',' or ':'
or ' ' as needed.

This means that when we come to add / remove parameters
from the test files line, the patch diffs will only
ever show a single line added/removed which will greatly
simplify review work.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2015-11-09 15:50:39 +00:00

78 lines
1.2 KiB
Plaintext

iptables \
-A FJ-vnet0 \
-p all \
-m state \
--state ESTABLISHED,RELATED \
-m comment \
--comment 'out: existing and related (ftp) connections' \
-j RETURN
iptables \
-A HJ-vnet0 \
-p all \
-m state \
--state ESTABLISHED,RELATED \
-m comment \
--comment 'out: existing and related (ftp) connections' \
-j RETURN
iptables \
-A FP-vnet0 \
-p all \
-m state \
--state ESTABLISHED \
-m comment \
--comment 'in: existing connections' \
-j ACCEPT
iptables \
-A FP-vnet0 \
-p tcp \
--dport 21:22 \
-m state \
--state NEW \
-m comment \
--comment 'in: ftp and ssh' \
-j ACCEPT
iptables \
-A FP-vnet0 \
-p icmp \
-m state \
--state NEW \
-m comment \
--comment 'in: icmp' \
-j ACCEPT
iptables \
-A FJ-vnet0 \
-p udp \
--dport 53 \
-m state \
--state NEW \
-m comment \
--comment 'out: DNS lookups' \
-j RETURN
iptables \
-A HJ-vnet0 \
-p udp \
--dport 53 \
-m state \
--state NEW \
-m comment \
--comment 'out: DNS lookups' \
-j RETURN
iptables \
-A FJ-vnet0 \
-p all \
-m comment \
--comment 'inout: drop all non-accepted traffic' \
-j DROP
iptables \
-A FP-vnet0 \
-p all \
-m comment \
--comment 'inout: drop all non-accepted traffic' \
-j DROP
iptables \
-A HJ-vnet0 \
-p all \
-m comment \
--comment 'inout: drop all non-accepted traffic' \
-j DROP