mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-27 07:22:07 +03:00
51d3fb0276
This patch adds an optional XML attribute to a nwfilter rule to give the user control over whether the rule is supposed to be using the iptables state match or not. A rule may now look like shown in the XML below with the statematch attribute either having value '0' or 'false' (case-insensitive).
[...]
<rule action='accept' direction='in' statematch='false'>
<tcp srcmacaddr='1:2:3:4:5:6'
srcipaddr='10.1.2.3' srcipmask='32'
dscp='33'
srcportstart='20' srcportend='21'
dstportstart='100' dstportend='1111'/>
</rule>
[...]
I am also extending the nwfilter schema and add this attribute to a test case.
|
||
|---|---|---|
| .. | ||
| capability.rng | ||
| domain.rng | ||
| domainsnapshot.rng | ||
| interface.rng | ||
| Makefile.am | ||
| network.rng | ||
| nodedev.rng | ||
| nwfilter.rng | ||
| secret.rng | ||
| storageencryption.rng | ||
| storagepool.rng | ||
| storagevol.rng | ||