1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
table inet t {
set s {
type ifname
elements = { "eth0",
"eth1",
"eth2",
"eth3",
"veth1" }
}
set sc {
type inet_service . ifname
elements = { 22 . "eth0",
80 . "eth0",
81 . "eth0",
80 . "eth1" }
}
set nv {
type ifname . mark
elements = { "eth0" . 0x00000001,
"eth0" . 0x00000002 }
}
set z {
typeof ct zone
elements = { 1, 2, 3, 4, 5,
6 }
}
set m {
typeof meta mark
elements = { 0x00000001, 0x00000002, 0x00000003, 0x00000004, 0x00000005,
0x00000006 }
}
map cz {
typeof iifname : ct zone
elements = { "eth0" : 1,
"eth1" : 2,
"veth4" : 1 }
}
map cm {
typeof iifname : ct mark
elements = { "eth0" : 0x00000001,
"eth1" : 0x00000002,
"veth4" : 0x00000001 }
}
chain c {
iifname @s accept
oifname @s accept
tcp dport . iifname @sc accept
iifname . meta mark @nv accept
}
}
|
