mirror of
https://github.com/libvirt/libvirt.git
synced 2026-10-02 12:20:06 -05:00
Dion Bosschieter
be9885c274
Prepare for introduction of nwfilter nftables driver test files. Create new nwfilterxml2ebipfirewalldata directory for nwfilter ebiptables driver specific test files. This way we split off the xml test data from the argument test files, which are driver specific. Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> Signed-off-by: Dion Bosschieter <dionbosschieter@gmail.com>
79 lines
877 B
Plaintext
79 lines
877 B
Plaintext
iptables \
|
|
-w \
|
|
-A FP-vnet0 \
|
|
-p tcp \
|
|
--dport 22 \
|
|
-j ACCEPT
|
|
iptables \
|
|
-w \
|
|
-A FJ-vnet0 \
|
|
-p tcp \
|
|
--sport 22 \
|
|
-j RETURN
|
|
iptables \
|
|
-w \
|
|
-A HJ-vnet0 \
|
|
-p tcp \
|
|
--sport 22 \
|
|
-j RETURN
|
|
iptables \
|
|
-w \
|
|
-A FJ-vnet0 \
|
|
-p tcp \
|
|
--sport 80 \
|
|
-m conntrack \
|
|
--ctstate ESTABLISHED \
|
|
-m conntrack \
|
|
--ctdir Reply \
|
|
-j RETURN
|
|
iptables \
|
|
-w \
|
|
-A FP-vnet0 \
|
|
-p tcp \
|
|
--dport 80 \
|
|
-m conntrack \
|
|
--ctstate NEW,ESTABLISHED \
|
|
-m conntrack \
|
|
--ctdir Original \
|
|
-j ACCEPT
|
|
iptables \
|
|
-w \
|
|
-A HJ-vnet0 \
|
|
-p tcp \
|
|
--sport 80 \
|
|
-m conntrack \
|
|
--ctstate ESTABLISHED \
|
|
-m conntrack \
|
|
--ctdir Reply \
|
|
-j RETURN
|
|
iptables \
|
|
-w \
|
|
-A FJ-vnet0 \
|
|
-p tcp \
|
|
-j REJECT
|
|
iptables \
|
|
-w \
|
|
-A FP-vnet0 \
|
|
-p tcp \
|
|
-j REJECT
|
|
iptables \
|
|
-w \
|
|
-A HJ-vnet0 \
|
|
-p tcp \
|
|
-j REJECT
|
|
iptables \
|
|
-w \
|
|
-A FJ-vnet0 \
|
|
-p all \
|
|
-j DROP
|
|
iptables \
|
|
-w \
|
|
-A FP-vnet0 \
|
|
-p all \
|
|
-j DROP
|
|
iptables \
|
|
-w \
|
|
-A HJ-vnet0 \
|
|
-p all \
|
|
-j DROP
|