tests/shell/testcases/optimizations/dumps/skip_merge.nft


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

table inet filter {
	set udp_accepted {
		type inet_service
		elements = { 500, 4500 }
	}

	set tcp_accepted {
		type inet_service
		elements = { 80, 443 }
	}

	chain udp_input {
		udp dport 1-128 accept
		udp dport @udp_accepted accept
		udp dport 53 accept
	}

	chain tcp_input {
		tcp dport { 1-128, 8888-9999 } accept
		tcp dport @tcp_accepted accept
		tcp dport 1024-65535 accept
	}
}