libvirt/tests/nwfilterxml2xmlout/example-2.xml
Stefan Berger 5c6405a058 nwfilter: Add test case for testing the state attribute
This patch adds a test case for testing the XML parser's and instantiator's
support of the state attribute. The other test case tests existing
capabilities. Both test cases will be used in TCK again.
2010-10-07 06:43:35 -04:00

22 lines
905 B
XML

<filter name='testcase' chain='root'>
<uuid>01a992d2-f8c8-7c27-f69b-ab0a9d377379</uuid>
<rule action='accept' direction='out' priority='100'>
<all state='ESTABLISHED,RELATED' comment='out: existing and related (ftp) connections'/>
</rule>
<rule action='accept' direction='in' priority='100'>
<all state='ESTABLISHED' comment='in: existing connections'/>
</rule>
<rule action='accept' direction='in' priority='200'>
<tcp state='NEW' dstportstart='21' dstportend='22' comment='in: ftp and ssh'/>
</rule>
<rule action='accept' direction='in' priority='300'>
<icmp state='NEW' comment='in: icmp'/>
</rule>
<rule action='accept' direction='out' priority='300'>
<udp state='NEW' dstportstart='53' comment='out: DNS lookups'/>
</rule>
<rule action='drop' direction='inout' priority='1000'>
<all comment='inout: drop all non-accepted traffic'/>
</rule>
</filter>