libvirt/tests/nwfilterxml2firewalldata
Daniel P. Berrangé 2a95dbd03c nwfilter: drop support for legacy iptables conntrack direction
Long ago we adapted to Linux kernel changes which inverted the
behaviour of the conntrack --ctdir setting:

  commit a6a04ea47a
  Author: Stefan Berger <stefanb@us.ibm.com>
  Date:   Wed May 15 21:02:11 2013 -0400

    nwfilter: check for inverted ctdir

    Linux netfilter at some point (Linux 2.6.39) inverted the meaning of the
    '--ctdir reply' and newer netfilter implementations now expect
    '--ctdir original' instead and vice-versa.
    We check for the kernel version and assume that all Linux kernels with version
    2.6.39 have the newer inverted logic.

    Any distro backporting the Linux kernel patch that inverts the --ctdir logic
    (Linux commit 96120d86f) must also backport this patch for Linux and
    adapt the kernel version being tested for.

    Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>

Given our supported platform targets, we no longer need to
consider a version of Linux before 2.6.39, so can drop
support for the old direction behaviour.

The test suite updates are triggered because that never
probed for the ctdir direction, and so the iptables syntax
generator unconditionally dropped the ctdir args.

Reviewed-by: Laine Stump <laine@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2022-03-09 11:37:32 +00:00
..
ah-ipv6-linux.args
ah-ipv6.xml
ah-linux.args
ah.xml
all-ipv6-linux.args
all-ipv6.xml tests: Update IPv4-in-IPv6 addresses 2022-03-04 15:08:59 +01:00
all-linux.args
all.xml
arp-linux.args
arp.xml
comment-linux.args
comment.xml
conntrack-linux.args
conntrack.xml
esp-ipv6-linux.args
esp-ipv6.xml
esp-linux.args
esp.xml
example-1-linux.args
example-1.xml Add a test suite for nwfilter ebiptables tech driver 2014-04-25 15:44:10 +01:00
example-2-linux.args
example-2.xml Add a test suite for nwfilter ebiptables tech driver 2014-04-25 15:44:10 +01:00
hex-data-linux.args
hex-data.xml
icmp-direction2-linux.args
icmp-direction2.xml
icmp-direction3-linux.args
icmp-direction3.xml
icmp-direction-linux.args
icmp-direction.xml
icmp-linux.args
icmp.xml
icmpv6-linux.args
icmpv6.xml
igmp-linux.args
igmp.xml
ip-linux.args
ip.xml
ipset-linux.args
ipset.xml
ipt-no-macspoof-linux.args
ipt-no-macspoof.xml
ipv6-linux.args
ipv6.xml
iter1-linux.args
iter1.xml
iter2-linux.args
iter2.xml
iter3-linux.args
iter3.xml
mac-linux.args
mac.xml
rarp-linux.args
rarp.xml
ref-rule.xml
ref.xml
sctp-ipv6-linux.args
sctp-ipv6.xml
sctp-linux.args
sctp.xml
stp-linux.args
stp.xml
target2-linux.args
target2.xml
target-linux.args
target.xml
tcp-ipv6-linux.args
tcp-ipv6.xml
tcp-linux.args
tcp.xml
udp-ipv6-linux.args
udp-ipv6.xml
udp-linux.args
udp.xml
udplite-ipv6-linux.args
udplite-ipv6.xml
udplite-linux.args
udplite.xml
vlan-linux.args
vlan.xml