libvirt/tests/nwfilterxml2firewalldata
Stefan Berger 3a3b3691d1 nwfilter: Add support for icmpv6 filtering
Make use of the ebtables functionality to be able to filter certain
parameters of icmpv6 packets. Extend the XML parser for icmpv6 types,
type ranges, codes, and code ranges. Extend the nwfilter documentation,
schema, and test cases.

Being able to filter icmpv6 types and codes helps extending the DHCP
snooper for IPv6 and filtering at least some parameters of IPv6's NDP
(Neighbor Discovery Protocol) packets. However, the filtering will not
be as good as the filtering of ARP packets since we cannot
check on IP addresses in the payload of the NDP packets.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-01-07 11:41:49 -05:00
..
ah-ipv6-linux.args
ah-ipv6.xml
ah-linux.args
ah.xml
all-ipv6-linux.args
all-ipv6.xml
all-linux.args
all.xml
arp-linux.args
arp.xml
comment-linux.args
comment.xml
conntrack-linux.args
conntrack.xml
esp-ipv6-linux.args
esp-ipv6.xml
esp-linux.args
esp.xml
example-1-linux.args
example-1.xml
example-2-linux.args
example-2.xml
hex-data-linux.args
hex-data.xml
icmp-direction2-linux.args
icmp-direction2.xml
icmp-direction3-linux.args
icmp-direction3.xml
icmp-direction-linux.args
icmp-direction.xml
icmp-linux.args
icmp.xml
icmpv6-linux.args
icmpv6.xml
igmp-linux.args
igmp.xml
ip-linux.args
ip.xml
ipset-linux.args
ipset.xml
ipt-no-macspoof-linux.args
ipt-no-macspoof.xml
ipv6-linux.args
ipv6.xml
iter1-linux.args
iter1.xml
iter2-linux.args
iter2.xml
iter3-linux.args
iter3.xml
mac-linux.args
mac.xml
rarp-linux.args
rarp.xml
ref-rule.xml
ref.xml
sctp-ipv6-linux.args
sctp-ipv6.xml
sctp-linux.args
sctp.xml
stp-linux.args
stp.xml
target2-linux.args
target2.xml
target-linux.args
target.xml
tcp-ipv6-linux.args
tcp-ipv6.xml
tcp-linux.args
tcp.xml
udp-ipv6-linux.args
udp-ipv6.xml
udp-linux.args
udp.xml
udplite-ipv6-linux.args
udplite-ipv6.xml
udplite-linux.args
udplite.xml
vlan-linux.args
vlan.xml