blob: d0f16c51fa4cb13c82e6e6f4dacb0d8383a8a7f1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
:output;type filter hook output priority 0
*ip;test-ip4;output
ct original saddr 192.168.0.1;ok
ct reply saddr 192.168.0.1;ok
ct original daddr 192.168.0.1;ok
ct reply daddr 192.168.0.1;ok
# same, but with a netmask
ct original saddr 192.168.1.0/24;ok
ct reply saddr 192.168.1.0/24;ok
ct original daddr 192.168.1.0/24;ok
ct reply daddr 192.168.1.0/24;ok
ct l3proto ipv4;ok
ct l3proto foobar;fail
ct protocol 6 ct original proto-dst 22;ok
ct original protocol 17 ct reply proto-src 53;ok;ct protocol 17 ct reply proto-src 53
# wrong address family
ct reply daddr dead::beef;fail
|
