Stefan Berger 51d3fb0276 nwfilter: add XML attribute to control iptables state match
This patch adds an optional XML attribute to a nwfilter rule to give the user control over whether the rule is supposed to be using the iptables state match or not. A rule may now look like shown in the XML below with the statematch attribute either having value '0' or 'false' (case-insensitive).

[...]
<rule action='accept' direction='in' statematch='false'>
<tcp srcmacaddr='1:2:3:4:5:6'
           srcipaddr='10.1.2.3' srcipmask='32'
           dscp='33'
           srcportstart='20' srcportend='21'
           dstportstart='100' dstportend='1111'/>
</rule>
[...]

I am also extending the nwfilter schema and add this attribute to a test case.
2010-06-17 14:12:34 -04:00
..
2009-10-06 11:12:53 +01:00
2009-10-09 13:01:22 +01:00
2009-11-06 16:05:18 +01:00
2009-11-06 16:05:18 +01:00
2009-11-06 16:05:18 +01:00
2009-11-06 16:05:18 +01:00
2010-02-21 14:56:23 +01:00
2010-06-09 12:55:02 +02:00
2009-09-22 12:55:39 +02:00
2009-12-03 15:27:24 +01:00
2010-05-07 19:52:35 +02:00
2009-09-22 12:55:39 +02:00
2009-07-16 15:06:42 +02:00
2009-04-15 20:42:50 +00:00
2009-04-15 20:42:50 +00:00
2009-04-15 20:42:50 +00:00
2009-04-15 20:42:50 +00:00
2009-04-15 20:42:50 +00:00
2009-04-15 20:42:50 +00:00
2010-02-04 19:09:28 +01:00
2010-02-21 14:56:23 +01:00
2010-04-30 18:55:08 +02:00
2009-07-29 09:04:21 +01:00
2009-04-15 20:42:50 +00:00
2008-04-24 09:44:00 +00:00
2010-05-25 07:09:31 -04:00
2008-09-18 09:00:10 +00:00