mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-25 01:34:11 +03:00
37208d9d17
There's quite a few negative tests. In anticipation of schema testing of the 'nwfilterxml2xmlin' directory rename all negative/non-conformant XMLs with the -invalid suffix. Signed-off-by: Peter Krempa <pkrempa@redhat.com> Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
82 lines
2.3 KiB
XML
82 lines
2.3 KiB
XML
<filter name='testcase'>
|
|
<uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid>
|
|
<rule action='accept' direction='out'>
|
|
<ipv6 srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:fe'
|
|
dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:80'
|
|
srcipaddr='::10.1.2.3' srcipmask='22'
|
|
dstipaddr='::10.1.2.3'
|
|
dstipmask='ffff:ffff:ffff:ffff:ffff:ffff:ffff:8000'
|
|
protocol='udp'
|
|
srcportstart='20' srcportend='22'
|
|
dstportstart='100' dstportend='101'
|
|
/>
|
|
</rule>
|
|
|
|
<rule action='accept' direction='inout'>
|
|
<ipv6 srcipaddr='1::2' srcipmask='128'
|
|
dstipaddr='a:b:c::'
|
|
dstipmask='ffff:ffff:ffff:ffff:8000::'
|
|
protocol='6'
|
|
srcportstart='20' srcportend='22'
|
|
dstportstart='100' dstportend='101'
|
|
/>
|
|
</rule>
|
|
|
|
<rule action='accept' direction='inout'>
|
|
<ipv6 srcipaddr='1::2' srcipmask='128'
|
|
dstipaddr='a:b:c::'
|
|
dstipmask='ffff:ffff:ffff:ffff:8000::'
|
|
protocol='6'
|
|
srcportstart='255' srcportend='256'
|
|
dstportstart='65535' dstportend='65536'
|
|
/>
|
|
</rule>
|
|
|
|
<rule action='accept' direction='inout'>
|
|
<ipv6 srcipaddr='1::2' srcipmask='128'
|
|
dstipaddr='a:b:c::'
|
|
dstipmask='ffff:ffff:ffff:ffff:8000::'
|
|
protocol='18'
|
|
/>
|
|
</rule>
|
|
|
|
<rule action='accept' direction='inout'>
|
|
<ipv6 srcipaddr='1::2' srcipmask='128'
|
|
dstipaddr='a:b:c::'
|
|
dstipmask='ffff:ffff:ffff:ffff:8000::'
|
|
protocol='icmpv6'
|
|
type='1' typeend='11'
|
|
code='10' codeend='11'
|
|
/>
|
|
</rule>
|
|
|
|
<rule action='accept' direction='inout'>
|
|
<ipv6 srcipaddr='1::2' srcipmask='128'
|
|
dstipaddr='a:b:c::'
|
|
dstipmask='ffff:ffff:ffff:ffff:8000::'
|
|
protocol='icmpv6'
|
|
type='1'
|
|
code='10'
|
|
/>
|
|
</rule>
|
|
|
|
<rule action='accept' direction='inout'>
|
|
<ipv6 srcipaddr='1::2' srcipmask='128'
|
|
dstipaddr='a:b:c::'
|
|
dstipmask='ffff:ffff:ffff:ffff:8000::'
|
|
protocol='icmpv6'
|
|
code='10'
|
|
/>
|
|
</rule>
|
|
|
|
<rule action='accept' direction='inout'>
|
|
<ipv6 srcipaddr='1::2' srcipmask='128'
|
|
dstipaddr='a:b:c::'
|
|
dstipmask='ffff:ffff:ffff:ffff:8000::'
|
|
protocol='icmpv6'
|
|
type='1'
|
|
/>
|
|
</rule>
|
|
|
|
</filter>
|