mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-09-08 16:54:49 +00:00
This patch adds an optional XML attribute to a nwfilter rule to give the user control over whether the rule is supposed to be using the iptables state match or not. A rule may now look like shown in the XML below with the statematch attribute either having value '0' or 'false' (case-insensitive). [...] <rule action='accept' direction='in' statematch='false'> <tcp srcmacaddr='1:2:3:4:5:6' srcipaddr='10.1.2.3' srcipmask='32' dscp='33' srcportstart='20' srcportend='21' dstportstart='100' dstportend='1111'/> </rule> [...] I am also extending the nwfilter schema and add this attribute to a test case. |
||
---|---|---|
.. | ||
ah-ipv6-test.xml | ||
ah-test.xml | ||
all-ipv6-test.xml | ||
all-test.xml | ||
arp-test.xml | ||
conntrack-test.xml | ||
esp-ipv6-test.xml | ||
esp-test.xml | ||
hex-data-test.xml | ||
icmp-direction2-test.xml | ||
icmp-direction3-test.xml | ||
icmp-direction-test.xml | ||
icmp-test.xml | ||
icmpv6-test.xml | ||
igmp-test.xml | ||
ip-test.xml | ||
ipt-no-macspoof-test.xml | ||
ipv6-test.xml | ||
mac-test.xml | ||
rarp-test.xml | ||
ref-rule-test.xml | ||
ref-test.xml | ||
sctp-ipv6-test.xml | ||
sctp-test.xml | ||
tcp-ipv6-test.xml | ||
tcp-test.xml | ||
udp-ipv6-test.xml | ||
udp-test.xml | ||
udplite-ipv6-test.xml | ||
udplite-test.xml |