mirror of
https://github.com/libvirt/libvirt.git
synced 2026-10-02 12:20:06 -05:00
Dion Bosschieter
be9885c274
Prepare for introduction of nwfilter nftables driver test files. Create new nwfilterxml2ebipfirewalldata directory for nwfilter ebiptables driver specific test files. This way we split off the xml test data from the argument test files, which are driver specific. Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> Signed-off-by: Dion Bosschieter <dionbosschieter@gmail.com>
156 lines
2.8 KiB
Plaintext
156 lines
2.8 KiB
Plaintext
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-s 01:02:03:04:05:06/ff:ff:ff:ff:ff:fe \
|
|
-d aa:bb:cc:dd:ee:ff/ff:ff:ff:ff:ff:80 \
|
|
-p ipv6 \
|
|
--ip6-source ::ffff:10.1.2.3/22 \
|
|
--ip6-destination ::ffff:10.1.2.3/113 \
|
|
--ip6-protocol 17 \
|
|
--ip6-source-port 20:22 \
|
|
--ip6-destination-port 100:101 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-destination 1::2/128 \
|
|
--ip6-source a:b:c::/65 \
|
|
--ip6-protocol 6 \
|
|
--ip6-destination-port 20:22 \
|
|
--ip6-source-port 100:101 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-source 1::2/128 \
|
|
--ip6-destination a:b:c::/65 \
|
|
--ip6-protocol 6 \
|
|
--ip6-source-port 20:22 \
|
|
--ip6-destination-port 100:101 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-destination 1::2/128 \
|
|
--ip6-source a:b:c::/65 \
|
|
--ip6-protocol 6 \
|
|
--ip6-destination-port 255:256 \
|
|
--ip6-source-port 65535:65535 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-source 1::2/128 \
|
|
--ip6-destination a:b:c::/65 \
|
|
--ip6-protocol 6 \
|
|
--ip6-source-port 255:256 \
|
|
--ip6-destination-port 65535:65535 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-destination 1::2/128 \
|
|
--ip6-source a:b:c::/65 \
|
|
--ip6-protocol 18 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-source 1::2/128 \
|
|
--ip6-destination a:b:c::/65 \
|
|
--ip6-protocol 18 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-destination 1::2/128 \
|
|
--ip6-source a:b:c::/65 \
|
|
--ip6-protocol 58 \
|
|
--ip6-icmp-type 1:11/10:11 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-source 1::2/128 \
|
|
--ip6-destination a:b:c::/65 \
|
|
--ip6-protocol 58 \
|
|
--ip6-icmp-type 1:11/10:11 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-destination 1::2/128 \
|
|
--ip6-source a:b:c::/65 \
|
|
--ip6-protocol 58 \
|
|
--ip6-icmp-type 1:1/10:10 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-source 1::2/128 \
|
|
--ip6-destination a:b:c::/65 \
|
|
--ip6-protocol 58 \
|
|
--ip6-icmp-type 1:1/10:10 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-destination 1::2/128 \
|
|
--ip6-source a:b:c::/65 \
|
|
--ip6-protocol 58 \
|
|
--ip6-icmp-type 0:255/10:10 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-source 1::2/128 \
|
|
--ip6-destination a:b:c::/65 \
|
|
--ip6-protocol 58 \
|
|
--ip6-icmp-type 0:255/10:10 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-J-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-destination 1::2/128 \
|
|
--ip6-source a:b:c::/65 \
|
|
--ip6-protocol 58 \
|
|
--ip6-icmp-type 1:1/0:255 \
|
|
-j ACCEPT
|
|
ebtables \
|
|
--concurrent \
|
|
-t nat \
|
|
-A libvirt-P-vnet0 \
|
|
-p ipv6 \
|
|
--ip6-source 1::2/128 \
|
|
--ip6-destination a:b:c::/65 \
|
|
--ip6-protocol 58 \
|
|
--ip6-icmp-type 1:1/0:255 \
|
|
-j ACCEPT
|