mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-11-05 12:51:12 +00:00
f341bdee8d
Run all the networkxml2firewall tests twice - once with iptables backend, and once with the nftables backend. The results files for the existing iptables tests were previously named *.args. That has been changed to *.iptables, and the results files for the new nftables tests are named *.nftables. Signed-off-by: Laine Stump <laine@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
107 lines
1.8 KiB
Plaintext
107 lines
1.8 KiB
Plaintext
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_INP \
|
|
--in-interface virbr0 \
|
|
--protocol tcp \
|
|
--destination-port 67 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_INP \
|
|
--in-interface virbr0 \
|
|
--protocol udp \
|
|
--destination-port 67 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_OUT \
|
|
--out-interface virbr0 \
|
|
--protocol tcp \
|
|
--destination-port 68 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_OUT \
|
|
--out-interface virbr0 \
|
|
--protocol udp \
|
|
--destination-port 68 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_INP \
|
|
--in-interface virbr0 \
|
|
--protocol tcp \
|
|
--destination-port 53 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_INP \
|
|
--in-interface virbr0 \
|
|
--protocol udp \
|
|
--destination-port 53 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_OUT \
|
|
--out-interface virbr0 \
|
|
--protocol tcp \
|
|
--destination-port 53 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_OUT \
|
|
--out-interface virbr0 \
|
|
--protocol udp \
|
|
--destination-port 53 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_FWO \
|
|
--in-interface virbr0 \
|
|
--jump REJECT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_FWI \
|
|
--out-interface virbr0 \
|
|
--jump REJECT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_FWX \
|
|
--in-interface virbr0 \
|
|
--out-interface virbr0 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_FWO \
|
|
--source 192.168.122.0/24 \
|
|
--in-interface virbr0 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table filter \
|
|
--insert LIBVIRT_FWI \
|
|
--destination 192.168.122.0/24 \
|
|
--out-interface virbr0 \
|
|
--jump ACCEPT
|
|
iptables \
|
|
-w \
|
|
--table mangle \
|
|
--insert LIBVIRT_PRT \
|
|
--out-interface virbr0 \
|
|
--protocol udp \
|
|
--destination-port 68 \
|
|
--jump CHECKSUM \
|
|
--checksum-fill
|