1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
#!/bin/bash
EXPECTED="add table ip test
add set ip test tcp_good_flags { type tcp_flag ; flags constant ; elements = {
( 0 | 0 | 0 |ack| 0 | 0 ), \
( 0 | 0 | 0 |ack| 0 |urg), \
( 0 | 0 | 0 |ack|psh| 0 ), \
( 0 | 0 | 0 |ack|psh|urg), \
( 0 | 0 |rst| 0 | 0 | 0 ), \
( 0 | 0 |rst|ack| 0 | 0 ), \
( 0 | 0 |rst|ack| 0 |urg), \
( 0 | 0 |rst|ack|psh| 0 ), \
( 0 | 0 |rst|ack|psh|urg), \
( 0 |syn| 0 | 0 | 0 | 0 ), \
( 0 |syn| 0 |ack| 0 | 0 ), \
( 0 |syn| 0 |ack| 0 |urg), \
( 0 |syn| 0 |ack|psh| 0 ), \
( 0 |syn| 0 |ack|psh|urg), \
(fin| 0 | 0 |ack| 0 | 0 ), \
(fin| 0 | 0 |ack| 0 |urg), \
(fin| 0 | 0 |ack|psh| 0 ), \
(fin| 0 | 0 |ack|psh|urg) \
} ; }"
set -e
$NFT -f - <<< $EXPECTED
|