External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2024-07-12 12:55:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
e674218dc2
libvirt/tests/nwfilterxml2firewalldata/iter2-linux.args
Laine Stump e66451f685 util/tests: enable locking on iptables/ebtables commandlines in unit tests 
All the unit tests that use iptables/ip6tables/ebtables have been
written to omit the locking/exclusive use primitive on the generated
commandlines. Even though none of the tests actually execute those
commands (and so it doesn't matter for purposes of the test whether or
not the commands support these options), it still made sense when some
systems had these locking options and some didn't.

We are now at a point where every supported Linux distro has supported
the locking options on these commands for quite a long time, and are
going to make their use non-optional. As a first step, this patch uses
the virFirewallSetLockOverride() function, which is called at the
beginning of all firewall-related tests, to set all the bools
controlling whether or not the locking options are used to true. This
means that all the test cases must be updated to include the proper
locking option in their commandlines.

The change to make actual execs of the commands unconditionally use
the locking option will be in an upcoming patch - this one affects
only the unit tests.

Signed-off-by: Laine Stump <laine@redhat.com>
Reviewed-by: Daniel Henrique Barboza <danielhb413@gmail.com>
2020-11-24 14:21:08 -05:00

1990 lines
25 KiB
Plaintext
Raw Blame History

iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 1 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 1 \
--dport 80 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 1 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 1 \
--sport 90 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 1 \
--dport 90 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 1 \
--sport 90 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 1 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 1 \
--dport 80 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 1 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 1.1.1.1 \
-m dscp \
--dscp 2 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 1.1.1.1 \
-m dscp \
--dscp 2 \
--dport 80 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 1.1.1.1 \
-m dscp \
--dscp 2 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 2.2.2.2 \
-m dscp \
--dscp 2 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 2.2.2.2 \
-m dscp \
--dscp 2 \
--dport 80 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 2.2.2.2 \
-m dscp \
--dscp 2 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 3.3.3.3 \
-m dscp \
--dscp 2 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 3.3.3.3 \
-m dscp \
--dscp 2 \
--dport 80 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 3.3.3.3 \
-m dscp \
--dscp 2 \
--sport 80 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 1.1.1.1 \
-m dscp \
--dscp 2 \
--sport 90 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 1.1.1.1 \
-m dscp \
--dscp 2 \
--dport 90 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 1.1.1.1 \
-m dscp \
--dscp 2 \
--sport 90 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 2.2.2.2 \
-m dscp \
--dscp 2 \
--sport 90 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 2.2.2.2 \
-m dscp \
--dscp 2 \
--dport 90 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 2.2.2.2 \
-m dscp \
--dscp 2 \
--sport 90 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 3.3.3.3 \
-m dscp \
--dscp 2 \
--sport 90 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 3.3.3.3 \
-m dscp \
--dscp 2 \
--dport 90 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 3.3.3.3 \
-m dscp \
--dscp 2 \
--sport 90 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 1.1.1.1 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 2.2.2.2 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 3.3.3.3 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
-m dscp \
--dscp 3 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 1.1.1.1 \
-m dscp \
--dscp 3 \
--dport 90 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
-m dscp \
--dscp 3 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
-m dscp \
--dscp 3 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 2.2.2.2 \
-m dscp \
--dscp 3 \
--dport 90 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
-m dscp \
--dscp 3 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
-m dscp \
--dscp 3 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 3.3.3.3 \
-m dscp \
--dscp 3 \
--dport 90 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
-m dscp \
--dscp 3 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 1.1.1.1 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 2.2.2.2 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 3.3.3.3 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 1.1.1.1 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 2.2.2.2 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 3.3.3.3 \
-m dscp \
--dscp 3 \
--dport 80 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
-m dscp \
--dscp 3 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1080 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1080 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1090 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1090 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1100 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1100 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 4 \
--dport 80 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 80 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 1.1.1.1 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 1.1.1.1 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 2.2.2.2 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 2.2.2.2 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p tcp \
--destination 3.3.3.3 \
-m dscp \
--dscp 4 \
--dport 90 \
--sport 1110 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p tcp \
--source 3.3.3.3 \
-m dscp \
--dscp 4 \
--sport 90 \
--dport 1110 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 1.1.1.1 \
--destination 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 1.1.1.1 \
--source 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 1.1.1.1 \
--destination 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 2.2.2.2 \
--destination 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 2.2.2.2 \
--source 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 2.2.2.2 \
--destination 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 3.3.3.3 \
--destination 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 3.3.3.3 \
--source 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 3.3.3.3 \
--destination 1.1.1.1 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 1.1.1.1 \
--destination 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 1.1.1.1 \
--source 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 1.1.1.1 \
--destination 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 2.2.2.2 \
--destination 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 2.2.2.2 \
--source 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 2.2.2.2 \
--destination 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 3.3.3.3 \
--destination 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 3.3.3.3 \
--source 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 3.3.3.3 \
--destination 2.2.2.2 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 1.1.1.1 \
--destination 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 1.1.1.1 \
--source 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 1.1.1.1 \
--destination 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 2.2.2.2 \
--destination 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 2.2.2.2 \
--source 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 2.2.2.2 \
--destination 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p udp \
--source 3.3.3.3 \
--destination 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p udp \
--destination 3.3.3.3 \
--source 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p udp \
--source 3.3.3.3 \
--destination 3.3.3.3 \
-m dscp \
--dscp 5 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
--destination 1.1.1.1 \
-m dscp \
--dscp 6 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 1.1.1.1 \
--source 1.1.1.1 \
-m dscp \
--dscp 6 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 1.1.1.1 \
--destination 1.1.1.1 \
-m dscp \
--dscp 6 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
--destination 2.2.2.2 \
-m dscp \
--dscp 6 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 2.2.2.2 \
--source 2.2.2.2 \
-m dscp \
--dscp 6 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 2.2.2.2 \
--destination 2.2.2.2 \
-m dscp \
--dscp 6 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
--destination 3.3.3.3 \
-m dscp \
--dscp 6 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
iptables \
-w \
-A FP-vnet0 \
-p sctp \
--destination 3.3.3.3 \
--source 3.3.3.3 \
-m dscp \
--dscp 6 \
-m state \
--state ESTABLISHED \
-j ACCEPT
iptables \
-w \
-A HJ-vnet0 \
-p sctp \
--source 3.3.3.3 \
--destination 3.3.3.3 \
-m dscp \
--dscp 6 \
-m state \
--state NEW,ESTABLISHED \
-j RETURN
Reference in New Issue View Git Blame Copy Permalink