Blame tests/py/inet/ip_tcp.t
|
Packit |
c5a612 |
:input;type filter hook input priority 0
|
|
Packit |
c5a612 |
:ingress;type filter hook ingress device lo priority 0
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
*inet;test-inet;input
|
|
Packit |
c5a612 |
*bridge;test-bridge;input
|
|
Packit |
c5a612 |
*netdev;test-netdev;ingress
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# must not remove ip dependency -- ONLY ipv4 packets should be matched
|
|
Packit |
c5a612 |
ip protocol tcp tcp dport 22;ok;ip protocol 6 tcp dport 22
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# can remove it here, ip protocol is implied via saddr.
|
|
Packit |
c5a612 |
ip protocol tcp ip saddr 1.2.3.4 tcp dport 22;ok;ip saddr 1.2.3.4 tcp dport 22
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# but not here.
|
|
Packit |
c5a612 |
ip protocol tcp counter ip saddr 1.2.3.4 tcp dport 22;ok;ip protocol 6 counter ip saddr 1.2.3.4 tcp dport 22
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# or here.
|
|
Packit |
c5a612 |
ip protocol tcp counter tcp dport 22;ok;ip protocol 6 counter tcp dport 22
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
ether type ip tcp dport 22;ok
|