blob: 7566f557bb8388176c6b80be79c1702347573657 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
table ip t {
set s {
type ipv4_addr . iface_index
flags interval
elements = { 127.0.0.1 . "lo",
127.0.0.2 . "lo" }
}
set s2 {
typeof ip saddr . iif
elements = { 127.0.0.1 . "lo",
127.0.0.2 . "lo" }
}
set s3 {
type iface_index
elements = { "lo" }
}
set s4 {
type iface_index
flags interval
elements = { "lo" }
}
set nomatch {
typeof ip saddr . iif
elements = { 127.0.0.3 . "lo" }
}
set nomatch2 {
type ipv4_addr . iface_index
elements = { 127.0.0.2 . 90000 }
}
chain c {
type filter hook input priority filter; policy accept;
icmp type echo-request ip saddr . iif @s counter packets 1 bytes 84
icmp type echo-request ip saddr . "lo" @s counter packets 1 bytes 84
icmp type echo-request ip saddr . "lo" @s counter packets 1 bytes 84
icmp type echo-request ip saddr . iif @s2 counter packets 1 bytes 84
icmp type echo-request ip saddr . "lo" @s2 counter packets 1 bytes 84
icmp type echo-request ip saddr . "lo" @s2 counter packets 1 bytes 84
icmp type echo-request ip daddr . "lo" @s counter packets 1 bytes 84
icmp type echo-request ip daddr . "lo" @s2 counter packets 1 bytes 84
icmp type echo-request iif @s3 counter packets 1 bytes 84
icmp type echo-request iif @s4 counter packets 1 bytes 84
ip daddr . "lo" @nomatch counter packets 0 bytes 0 drop
ip daddr . iif @nomatch2 counter packets 0 bytes 0 drop
}
}
|
