summaryrefslogtreecommitdiffstats
path: root/tests/xmlfiles/71-rule-real.xml
diff options
context:
space:
mode:
Diffstat (limited to 'tests/xmlfiles/71-rule-real.xml')
-rw-r--r--tests/xmlfiles/71-rule-real.xml31
1 files changed, 31 insertions, 0 deletions
diff --git a/tests/xmlfiles/71-rule-real.xml b/tests/xmlfiles/71-rule-real.xml
new file mode 100644
index 0000000..6bed65b
--- /dev/null
+++ b/tests/xmlfiles/71-rule-real.xml
@@ -0,0 +1,31 @@
+<rule family="ip" table="filter" chain="output" handle="35" version="0">
+ <rule_flags>0</rule_flags>
+ <expr type="payload">
+ <dreg>1</dreg>
+ <offset>9</offset>
+ <len>1</len>
+ <base>network</base>
+ </expr>
+ <expr type="cmp">
+ <sreg>1</sreg>
+ <op>eq</op>
+ <cmpdata>
+ <data_reg type="value">
+ <len>1</len>
+ <data0>0x00000006</data0>
+ </data_reg>
+ </cmpdata>
+ </expr>
+ <expr type="payload">
+ <dreg>1</dreg>
+ <offset>2</offset>
+ <len>2</len>
+ <base>transport</base>
+ </expr>
+ <expr type="lookup">
+ <set>map1</set>
+ <sreg>1</sreg>
+ <dreg>0</dreg>
+ </expr>
+</rule>
+<!-- nft add rule ip filter output tcp dport vmap { 22 => accept, 23 => drop, } -->