:input;type filter hook input priority 0
:ingress;type filter hook ingress device lo priority 0

*ip;test-ip4;input
*inet;test-inet;input
*netdev;test-netdev;ingress

!w type ipv4_addr;ok
!x type inet_proto;ok
!y type inet_service;ok
!z type time;ok

!set1 type ipv4_addr;ok
?set1 192.168.3.4;ok

?set1 192.168.3.4;ok
?set1 192.168.3.5, 192.168.3.6;ok
?set1 192.168.3.5, 192.168.3.6;ok
?set1 192.168.3.8, 192.168.3.9;ok
?set1 192.168.3.10, 192.168.3.11;ok
?set1 1234:1234:1234:1234:1234:1234:1234:1234;fail
?set2 192.168.3.4;fail

!set2 type ipv4_addr;ok
?set2 192.168.3.4;ok
?set2 192.168.3.5, 192.168.3.6;ok
?set2 192.168.3.5, 192.168.3.6;ok
?set2 192.168.3.8, 192.168.3.9;ok
?set2 192.168.3.10, 192.168.3.11;ok

ip saddr @set1 drop;ok
ip saddr != @set1 drop;ok
ip saddr @set2 drop;ok
ip saddr != @set2 drop;ok
ip saddr @set33 drop;fail
ip saddr != @set33 drop;fail

!set3 type ipv4_addr flags interval;ok
?set3 192.168.0.0/16;ok
?set3 172.16.0.0/12;ok
?set3 10.0.0.0/8;ok

!set4 type ipv4_addr flags interval;ok
?set4 192.168.1.0/24;ok
?set4 192.168.0.0/24;ok
?set4 192.168.2.0/24;ok
?set4 192.168.1.1;fail
?set4 192.168.3.0/24;ok

!set5 type ipv4_addr . ipv4_addr;ok
ip saddr . ip daddr @set5 drop;ok
add @set5 { ip saddr . ip daddr };ok

# test nested anonymous sets
ip saddr { { 1.1.1.0, 3.3.3.0 }, 2.2.2.0 };ok;ip saddr { 1.1.1.0, 2.2.2.0, 3.3.3.0 }
ip saddr { { 1.1.1.0/24, 3.3.3.0/24 }, 2.2.2.0/24 };ok;ip saddr { 1.1.1.0/24, 2.2.2.0/24, 3.3.3.0/24 }

!set6 type ipv4_addr;ok
?set6 192.168.3.5, *;ok
ip saddr @set6 drop;ok

ip saddr vmap { 1.1.1.1 : drop, * : accept };ok
meta mark set ip saddr map { 1.1.1.1 : 0x00000001, * : 0x00000002 };ok