mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-08-27 19:11:16 +00:00
Create a nwfilterxml2firewalltest to exercise the ebiptables_driver.applyNewRules method with a variety of different XML input files. The XML input files are taken from the libvirt-tck nwfilter tests. While the nwfilter tests verify the final state of the iptables chains, this test verifies the set of commands invoked to create the chains. Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
24 lines
835 B
XML
24 lines
835 B
XML
<filter name='tck-testcase' chain='root'>
|
|
<uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid>
|
|
<rule action='accept' direction='out'>
|
|
<tcp srcipaddr='$A' srcportstart='$B[@0]' dscp='1'/>
|
|
</rule>
|
|
<rule action='accept' direction='out'>
|
|
<udp srcipaddr='$A[@1]' srcportstart='$B[@2]' dscp='2'/>
|
|
</rule>
|
|
<rule action='accept' direction='out'>
|
|
<sctp srcipaddr='$A[@1]' srcportstart='$B[@2]' dstportstart='$C[@2]'
|
|
dscp='3'/>
|
|
</rule>
|
|
<rule action='accept' direction='out'>
|
|
<tcp srcipaddr='$A[@1]' srcportstart='$B[@2]' dstportstart='$C[@3]'
|
|
dscp='4'/>
|
|
</rule>
|
|
<rule action='accept' direction='out'>
|
|
<udp srcipaddr='$A[@1]' dstipaddr='$A[@2]' dscp='5'/>
|
|
</rule>
|
|
<rule action='accept' direction='out'>
|
|
<sctp srcipaddr='$A' dstipaddr='$A' dscp='6'/>
|
|
</rule>
|
|
</filter>
|