nwfilter: Add test case for testing the state attribute

This patch adds a test case for testing the XML parser's and instantiator's
support of the state attribute. The other test case tests existing
capabilities. Both test cases will be used in TCK again.
This commit is contained in:
Stefan Berger
2010-10-07 06:43:35 -04:00
parent 5b0c71ee07
commit 5c6405a058
5 changed files with 100 additions and 0 deletions

View File

@@ -0,0 +1,21 @@
<filter name='testcase' chain='root'>
<uuid>01a992d2-f8c8-7c27-f69b-ab0a9d377379</uuid>
<rule action='accept' direction='out' priority='100'>
<all state='ESTABLISHED,RELATED' comment='out: existing and related (ftp) connections'/>
</rule>
<rule action='accept' direction='in' priority='100'>
<all state='ESTABLISHED' comment='in: existing connections'/>
</rule>
<rule action='accept' direction='in' priority='200'>
<tcp state='NEW' dstportstart='21' dstportend='22' comment='in: ftp and ssh'/>
</rule>
<rule action='accept' direction='in' priority='300'>
<icmp state='NEW' comment='in: icmp'/>
</rule>
<rule action='accept' direction='out' priority='300'>
<udp state='NEW' dstportstart='53' comment='out: DNS lookups'/>
</rule>
<rule action='drop' direction='inout' priority='1000'>
<all comment='inout: drop all non-accepted traffic'/>
</rule>
</filter>