mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-10-24 15:03:09 +00:00
f341bdee8d
Run all the networkxml2firewall tests twice - once with iptables backend, and once with the nftables backend. The results files for the existing iptables tests were previously named *.args. That has been changed to *.iptables, and the results files for the new nftables tests are named *.nftables. Signed-off-by: Laine Stump <laine@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
257 lines
2.4 KiB
Plaintext
257 lines
2.4 KiB
Plaintext
nft \
|
|
list \
|
|
table \
|
|
ip \
|
|
libvirt
|
|
nft \
|
|
add \
|
|
table \
|
|
ip \
|
|
libvirt
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
INPUT \
|
|
'{ type filter hook input priority 0; policy accept; }'
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
FORWARD \
|
|
'{ type filter hook forward priority 0; policy accept; }'
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
OUTPUT \
|
|
'{ type filter hook output priority 0; policy accept; }'
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
LIBVIRT_INP
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip \
|
|
libvirt \
|
|
INPUT \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_INP
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
LIBVIRT_OUT
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip \
|
|
libvirt \
|
|
OUTPUT \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_OUT
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
LIBVIRT_FWO
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip \
|
|
libvirt \
|
|
FORWARD \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_FWO
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
LIBVIRT_FWI
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip \
|
|
libvirt \
|
|
FORWARD \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_FWI
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
LIBVIRT_FWX
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip \
|
|
libvirt \
|
|
FORWARD \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_FWX
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
POSTROUTING \
|
|
'{ type nat hook postrouting priority 100; policy accept; }'
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip \
|
|
libvirt \
|
|
LIBVIRT_PRT
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip \
|
|
libvirt \
|
|
POSTROUTING \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_PRT
|
|
nft \
|
|
list \
|
|
table \
|
|
ip6 \
|
|
libvirt
|
|
nft \
|
|
add \
|
|
table \
|
|
ip6 \
|
|
libvirt
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
INPUT \
|
|
'{ type filter hook input priority 0; policy accept; }'
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
FORWARD \
|
|
'{ type filter hook forward priority 0; policy accept; }'
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
OUTPUT \
|
|
'{ type filter hook output priority 0; policy accept; }'
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
LIBVIRT_INP
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip6 \
|
|
libvirt \
|
|
INPUT \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_INP
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
LIBVIRT_OUT
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip6 \
|
|
libvirt \
|
|
OUTPUT \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_OUT
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
LIBVIRT_FWO
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip6 \
|
|
libvirt \
|
|
FORWARD \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_FWO
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
LIBVIRT_FWI
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip6 \
|
|
libvirt \
|
|
FORWARD \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_FWI
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
LIBVIRT_FWX
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip6 \
|
|
libvirt \
|
|
FORWARD \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_FWX
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
POSTROUTING \
|
|
'{ type nat hook postrouting priority 100; policy accept; }'
|
|
nft \
|
|
add \
|
|
chain \
|
|
ip6 \
|
|
libvirt \
|
|
LIBVIRT_PRT
|
|
nft \
|
|
insert \
|
|
rule \
|
|
ip6 \
|
|
libvirt \
|
|
POSTROUTING \
|
|
counter \
|
|
jump \
|
|
LIBVIRT_PRT
|