mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-01-12 07:42:56 +00:00
8afd34f2d8
Back in commit bd6c46fa0cfe275c24debc1152cfc5206c04b59b Author: Juerg Haefliger <juerg.haefliger@hp.com> Date: Mon Jan 31 06:42:57 2011 -0500 tests: handle backspace-newline pairs in test input files all the test argv files were line wrapped so that the args were less than 80 characters. The way the line wrapping was done turns out to be quite undesirable, because it often leaves multiple parameters on the same line. If we later need to add or remove individual parameters, then it leaves us having to redo line wrapping. This commit changes the line wrapping so that every single "-param value" is one its own new line. If the "value" is still too long, then we break on ',' or ':' or ' ' as needed. This means that when we come to add / remove parameters from the test files line, the patch diffs will only ever show a single line added/removed which will greatly simplify review work. Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
310 lines
4.5 KiB
Plaintext
310 lines
4.5 KiB
Plaintext
ebtables \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-s 01:02:03:04:05:06/ff:ff:ff:ff:ff:ff \
|
|
-p 0x806 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-s 01:02:03:04:05:06/ff:ff:ff:ff:ff:ff \
|
|
-p 0x806 \
|
|
-j DROP
|
|
ebtables \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-s 01:02:03:04:05:06/ff:ff:ff:ff:ff:ff \
|
|
-p 0x806 \
|
|
-j DROP
|
|
ebtables \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-d aa:bb:cc:dd:ee:ff/ff:ff:ff:ff:ff:ff \
|
|
-p 0x800 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-d aa:bb:cc:dd:ee:ff/ff:ff:ff:ff:ff:ff \
|
|
-p 0x800 \
|
|
-j DROP
|
|
ebtables \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-d aa:bb:cc:dd:ee:ff/ff:ff:ff:ff:ff:ff \
|
|
-p 0x800 \
|
|
-j DROP
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--destination 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m state \
|
|
--state NEW,ESTABLISHED \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir out' \
|
|
-j RETURN
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
--source 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m state \
|
|
--state ESTABLISHED \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir out' \
|
|
-j ACCEPT
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--destination 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m state \
|
|
--state NEW,ESTABLISHED \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir out' \
|
|
-j RETURN
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--destination 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir out' \
|
|
-j DROP
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
--source 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir out' \
|
|
-j DROP
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--destination 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir out' \
|
|
-j DROP
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--destination 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir out' \
|
|
-j REJECT
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
--source 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir out' \
|
|
-j REJECT
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--destination 10.1.2.3/32 \
|
|
-m dscp \
|
|
--dscp 2 \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir out' \
|
|
-j REJECT
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
--destination 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m state \
|
|
--state ESTABLISHED \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir in' \
|
|
-j RETURN
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--source 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m state \
|
|
--state NEW,ESTABLISHED \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir in' \
|
|
-j ACCEPT
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
--destination 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m state \
|
|
--state ESTABLISHED \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir in' \
|
|
-j RETURN
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
--destination 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir in' \
|
|
-j DROP
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--source 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir in' \
|
|
-j DROP
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
--destination 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir in' \
|
|
-j DROP
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
--destination 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir in' \
|
|
-j REJECT
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
-m mac \
|
|
--mac-source 01:02:03:04:05:06 \
|
|
--source 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir in' \
|
|
-j REJECT
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
--destination 10.1.2.3/22 \
|
|
-m dscp \
|
|
--dscp 33 \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir in' \
|
|
-j REJECT
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir inout' \
|
|
-j RETURN
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir inout' \
|
|
-j ACCEPT
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'accept rule \
|
|
-- dir inout' \
|
|
-j RETURN
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir inout' \
|
|
-j DROP
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir inout' \
|
|
-j DROP
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'drop rule \
|
|
-- dir inout' \
|
|
-j DROP
|
|
iptables \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir inout' \
|
|
-j REJECT
|
|
iptables \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir inout' \
|
|
-j REJECT
|
|
iptables \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
-m comment \
|
|
--comment 'reject rule \
|
|
-- dir inout' \
|
|
-j REJECT
|