diff options
Diffstat (limited to 'tests/xmlfiles/37-rule-real.xml')
-rw-r--r-- | tests/xmlfiles/37-rule-real.xml | 95 |
1 files changed, 95 insertions, 0 deletions
diff --git a/tests/xmlfiles/37-rule-real.xml b/tests/xmlfiles/37-rule-real.xml new file mode 100644 index 0000000..5dfdcfd --- /dev/null +++ b/tests/xmlfiles/37-rule-real.xml @@ -0,0 +1,95 @@ +<rule family="ip" table="filter" chain="INPUT" handle="25" version="0"> + <rule_flags>0</rule_flags> + <expr type="meta"> + <dreg>1</dreg> + <key>iifname</key> + </expr> + <expr type="cmp"> + <sreg>1</sreg> + <op>eq</op> + <cmpdata> + <data_reg type="value"> + <len>16</len> + <data0>0x00000000</data0> + <data1>0x00000000</data1> + <data2>0x65000000</data2> + <data3>0x00306874</data3> + </data_reg> + </cmpdata> + </expr> + <expr type="payload"> + <dreg>1</dreg> + <offset>9</offset> + <len>1</len> + <base>network</base> + </expr> + <expr type="cmp"> + <sreg>1</sreg> + <op>eq</op> + <cmpdata> + <data_reg type="value"> + <len>1</len> + <data0>0x00000006</data0> + </data_reg> + </cmpdata> + </expr> + <expr type="payload"> + <dreg>1</dreg> + <offset>2</offset> + <len>2</len> + <base>transport</base> + </expr> + <expr type="cmp"> + <sreg>1</sreg> + <op>eq</op> + <cmpdata> + <data_reg type="value"> + <len>2</len> + <data0>0x00001600</data0> + </data_reg> + </cmpdata> + </expr> + <expr type="ct"> + <dreg>1</dreg> + <key>state</key> + <dir>0</dir> + </expr> + <expr type="bitwise"> + <sreg>1</sreg> + <dreg>1</dreg> + <len>4</len> + <mask> + <data_reg type="value"> + <len>4</len> + <data0>0x0000000a</data0> + </data_reg> + </mask> + <xor> + <data_reg type="value"> + <len>4</len> + <data0>0x00000000</data0> + </data_reg> + </xor> + </expr> + <expr type="cmp"> + <sreg>1</sreg> + <op>neq</op> + <cmpdata> + <data_reg type="value"> + <len>4</len> + <data0>0x00000000</data0> + </data_reg> + </cmpdata> + </expr> + <expr type="counter"> + <pkts>0</pkts> + <bytes>0</bytes> + </expr> + <expr type="log"> + <prefix>testprefix</prefix> + <group>1</group> + <snaplen>0</snaplen> + <qthreshold>0</qthreshold> + </expr> +</rule> +<!-- nft add rule filter INPUT meta iifname "eth0" tcp dport 22 ct state new,established counter log prefix testprefix group 1 --> |