mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-25 01:34:11 +03:00
37208d9d17
There's quite a few negative tests. In anticipation of schema testing of the 'nwfilterxml2xmlin' directory rename all negative/non-conformant XMLs with the -invalid suffix. Signed-off-by: Peter Krempa <pkrempa@redhat.com> Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
35 lines
1.1 KiB
XML
35 lines
1.1 KiB
XML
<filter name='testcase' chain='root'>
|
|
<uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid>
|
|
<rule action='accept' direction='out'>
|
|
<tcp srcmacaddr='1:2:3:4:5:6'
|
|
dstipaddr='10.1.2.3' dstipmask='255.255.255.255'
|
|
dscp='2'/>
|
|
</rule>
|
|
<rule action='accept' direction='in' statematch='false'>
|
|
<tcp srcmacaddr='1:2:3:4:5:6'
|
|
srcipaddr='10.1.2.3' srcipmask='32'
|
|
dscp='33'
|
|
srcportstart='20' srcportend='21'
|
|
dstportstart='100' dstportend='1111'/>
|
|
</rule>
|
|
<rule action='accept' direction='in' statematch='0'>
|
|
<tcp srcmacaddr='1:2:3:4:5:6'
|
|
srcipaddr='10.1.2.3' srcipmask='32'
|
|
dscp='63'
|
|
srcportstart='255' srcportend='256'
|
|
dstportstart='65535' dstportend='65536'/>
|
|
</rule>
|
|
<rule action='accept' direction='in'>
|
|
<tcp state='NONE' flags='SYN/ALL'/>
|
|
</rule>
|
|
<rule action='accept' direction='in'>
|
|
<tcp state='NONE' flags='SYN/SYN,ACK'/>
|
|
</rule>
|
|
<rule action='accept' direction='in'>
|
|
<tcp state='NONE' flags='RST/NONE'/>
|
|
</rule>
|
|
<rule action='accept' direction='in'>
|
|
<tcp state='NONE' flags='PSH/'/>
|
|
</rule>
|
|
</filter>
|