|
Packit Service |
e7ae83 |
# ip dscp cs1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "cs1"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip dscp != cs1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": "cs1"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip dscp 0x38
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "0x38"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip dscp != 0x20
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": "0x20"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip dscp {cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, ef}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
"cs0",
|
|
Packit Service |
e7ae83 |
"cs1",
|
|
Packit Service |
e7ae83 |
"cs2",
|
|
Packit Service |
e7ae83 |
"cs3",
|
|
Packit Service |
e7ae83 |
"cs4",
|
|
Packit Service |
e7ae83 |
"cs5",
|
|
Packit Service |
e7ae83 |
"cs6",
|
|
Packit Service |
e7ae83 |
"cs7",
|
|
Packit Service |
e7ae83 |
"af11",
|
|
Packit Service |
e7ae83 |
"af12",
|
|
Packit Service |
e7ae83 |
"af13",
|
|
Packit Service |
e7ae83 |
"af21",
|
|
Packit Service |
e7ae83 |
"af22",
|
|
Packit Service |
e7ae83 |
"af23",
|
|
Packit Service |
e7ae83 |
"af31",
|
|
Packit Service |
e7ae83 |
"af32",
|
|
Packit Service |
e7ae83 |
"af33",
|
|
Packit Service |
e7ae83 |
"af41",
|
|
Packit Service |
e7ae83 |
"af42",
|
|
Packit Service |
e7ae83 |
"af43",
|
|
Packit Service |
e7ae83 |
"ef"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip dscp != {cs0, cs3}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
"cs0",
|
|
Packit Service |
e7ae83 |
"cs3"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip dscp vmap { cs1 : continue , cs4 : accept } counter
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"vmap": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"data": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
"cs1",
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"continue": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
],
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
"cs4",
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"accept": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"counter": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip length 232
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "length",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 232
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip length != 233
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "length",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": 233
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip length 333-435
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "length",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 333, 435 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip length != 333-453
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "length",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 333, 453 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip length { 333, 553, 673, 838}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "length",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
333,
|
|
Packit Service |
e7ae83 |
553,
|
|
Packit Service |
e7ae83 |
673,
|
|
Packit Service |
e7ae83 |
838
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip length != { 333, 553, 673, 838}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "length",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
333,
|
|
Packit Service |
e7ae83 |
553,
|
|
Packit Service |
e7ae83 |
673,
|
|
Packit Service |
e7ae83 |
838
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip length { 333-535}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "length",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 333, 535 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip length != { 333-535}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "length",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 333, 535 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip id 22
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 22
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip id != 233
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": 233
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip id 33-45
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 33, 45 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip id != 33-45
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 33, 45 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip id { 33, 55, 67, 88}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
33,
|
|
Packit Service |
e7ae83 |
55,
|
|
Packit Service |
e7ae83 |
67,
|
|
Packit Service |
e7ae83 |
88
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip id != { 33, 55, 67, 88}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
33,
|
|
Packit Service |
e7ae83 |
55,
|
|
Packit Service |
e7ae83 |
67,
|
|
Packit Service |
e7ae83 |
88
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip id { 33-55}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 33, 55 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip id != { 33-55}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 33, 55 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip frag-off 222 accept
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "frag-off",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 222
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"accept": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip frag-off != 233
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "frag-off",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": 233
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip frag-off 33-45
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "frag-off",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 33, 45 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip frag-off != 33-45
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "frag-off",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 33, 45 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip frag-off { 33, 55, 67, 88}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "frag-off",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
33,
|
|
Packit Service |
e7ae83 |
55,
|
|
Packit Service |
e7ae83 |
67,
|
|
Packit Service |
e7ae83 |
88
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip frag-off != { 33, 55, 67, 88}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "frag-off",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
33,
|
|
Packit Service |
e7ae83 |
55,
|
|
Packit Service |
e7ae83 |
67,
|
|
Packit Service |
e7ae83 |
88
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip frag-off { 33-55}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "frag-off",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 33, 55 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip frag-off != { 33-55}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "frag-off",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 33, 55 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip ttl 0 drop
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 0
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"drop": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip ttl 233
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 233
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip ttl 33-55
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 33, 55 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip ttl != 45-50
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 45, 50 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip ttl {43, 53, 45 }
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
43,
|
|
Packit Service |
e7ae83 |
45,
|
|
Packit Service |
e7ae83 |
53
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip ttl != {43, 53, 45 }
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
43,
|
|
Packit Service |
e7ae83 |
45,
|
|
Packit Service |
e7ae83 |
53
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip ttl { 33-55}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 33, 55 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip ttl != { 33-55}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 33, 55 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip protocol tcp
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "protocol",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "tcp"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip protocol != tcp
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "protocol",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": "tcp"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip protocol { icmp, esp, ah, comp, udp, udplite, tcp, dccp, sctp} accept
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "protocol",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
"icmp",
|
|
Packit Service |
e7ae83 |
"esp",
|
|
Packit Service |
e7ae83 |
"ah",
|
|
Packit Service |
e7ae83 |
"comp",
|
|
Packit Service |
e7ae83 |
"udp",
|
|
Packit Service |
e7ae83 |
"udplite",
|
|
Packit Service |
e7ae83 |
"tcp",
|
|
Packit Service |
e7ae83 |
"dccp",
|
|
Packit Service |
e7ae83 |
"sctp"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"accept": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip protocol != { icmp, esp, ah, comp, udp, udplite, tcp, dccp, sctp} accept
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "protocol",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
"icmp",
|
|
Packit Service |
e7ae83 |
"esp",
|
|
Packit Service |
e7ae83 |
"ah",
|
|
Packit Service |
e7ae83 |
"comp",
|
|
Packit Service |
e7ae83 |
"udp",
|
|
Packit Service |
e7ae83 |
"udplite",
|
|
Packit Service |
e7ae83 |
"tcp",
|
|
Packit Service |
e7ae83 |
"dccp",
|
|
Packit Service |
e7ae83 |
"sctp"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"accept": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip protocol 255
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "protocol",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 255
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum 13172 drop
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 13172
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"drop": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum 22
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 22
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum != 233
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": 233
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum 33-45
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 33, 45 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum != 33-45
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ 33, 45 ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum { 33, 55, 67, 88}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
33,
|
|
Packit Service |
e7ae83 |
55,
|
|
Packit Service |
e7ae83 |
67,
|
|
Packit Service |
e7ae83 |
88
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum != { 33, 55, 67, 88}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
33,
|
|
Packit Service |
e7ae83 |
55,
|
|
Packit Service |
e7ae83 |
67,
|
|
Packit Service |
e7ae83 |
88
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum { 33-55}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 33, 55 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip checksum != { 33-55}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ 33, 55 ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr 192.168.2.0/24
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"prefix": {
|
|
Packit Service |
e7ae83 |
"addr": "192.168.2.0",
|
|
Packit Service |
e7ae83 |
"len": 24
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr != 192.168.2.0/24
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"prefix": {
|
|
Packit Service |
e7ae83 |
"addr": "192.168.2.0",
|
|
Packit Service |
e7ae83 |
"len": 24
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr 192.168.3.1 ip daddr 192.168.3.100
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "192.168.3.1"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "192.168.3.100"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr != 1.1.1.1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": "1.1.1.1"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr 1.1.1.1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "1.1.1.1"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr 192.168.0.1-192.168.0.250
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "192.168.0.1", "192.168.0.250" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr 10.0.0.0-10.255.255.255
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "10.0.0.0", "10.255.255.255" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr 172.16.0.0-172.31.255.255
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "172.16.0.0", "172.31.255.255" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr 192.168.3.1-192.168.4.250
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "192.168.3.1", "192.168.4.250" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr != 192.168.0.1-192.168.0.250
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "192.168.0.1", "192.168.0.250" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr { 192.168.0.1-192.168.0.250}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ "192.168.0.1", "192.168.0.250" ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr != { 192.168.0.1-192.168.0.250}
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
{ "range": [ "192.168.0.1", "192.168.0.250" ] }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr { 192.168.5.1, 192.168.5.2, 192.168.5.3 } accept
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
"192.168.5.1",
|
|
Packit Service |
e7ae83 |
"192.168.5.2",
|
|
Packit Service |
e7ae83 |
"192.168.5.3"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"accept": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr != { 192.168.5.1, 192.168.5.2, 192.168.5.3 } accept
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
"192.168.5.1",
|
|
Packit Service |
e7ae83 |
"192.168.5.2",
|
|
Packit Service |
e7ae83 |
"192.168.5.3"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"accept": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr 192.168.1.2-192.168.1.55
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "192.168.1.2", "192.168.1.55" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr != 192.168.1.2-192.168.1.55
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "192.168.1.2", "192.168.1.55" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr 192.168.1.3-192.168.33.55
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "192.168.1.3", "192.168.33.55" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr != 192.168.1.3-192.168.33.55
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "!=",
|
|
Packit Service |
e7ae83 |
"right": {
|
|
Packit Service |
e7ae83 |
"range": [ "192.168.1.3", "192.168.33.55" ]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr 192.168.0.1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "192.168.0.1"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr 192.168.0.1 drop
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "192.168.0.1"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"drop": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip daddr 192.168.0.2
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "192.168.0.2"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr & 0xff == 1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"&": [
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"0xff"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 1
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr & 0.0.0.255 < 0.0.0.127
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"&": [
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"0.0.0.255"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "<",
|
|
Packit Service |
e7ae83 |
"right": "0.0.0.127"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip saddr & 0xffff0000 == 0xffff0000
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"&": [
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "saddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"0xffff0000"
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "0xffff0000"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip version 4 ip hdrlength 5
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "version",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 4
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "hdrlength",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 5
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip hdrlength 0
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "hdrlength",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 0
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip hdrlength 15
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "hdrlength",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": 15
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# ip hdrlength vmap { 0-4 : drop, 5 : accept, 6 : continue } counter
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"vmap": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "hdrlength",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"data": {
|
|
Packit Service |
e7ae83 |
"set": [
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{ "range": [ 0, 4 ] },
|
|
Packit Service |
e7ae83 |
{ "drop": null }
|
|
Packit Service |
e7ae83 |
],
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
5,
|
|
Packit Service |
e7ae83 |
{ "accept": null }
|
|
Packit Service |
e7ae83 |
],
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
6,
|
|
Packit Service |
e7ae83 |
{ "continue": null }
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"counter": null
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip daddr set 127.0.0.1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "daddr",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": "127.0.0.1"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip checksum set 0
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "checksum",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": 0
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip id set 0
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "id",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": 0
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip ecn set 1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ecn",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": 1
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip ecn set ce
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ecn",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": "ce"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip ttl set 23
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "ttl",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": 23
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip protocol set 1
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "protocol",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": 1
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip dscp set af23
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": "af23"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|
|
Packit Service |
e7ae83 |
# iif "lo" ip dscp set cs0
|
|
Packit Service |
e7ae83 |
[
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"match": {
|
|
Packit Service |
e7ae83 |
"left": {
|
|
Packit Service |
e7ae83 |
"meta": { "key": "iif" }
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"op": "==",
|
|
Packit Service |
e7ae83 |
"right": "lo"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
{
|
|
Packit Service |
e7ae83 |
"mangle": {
|
|
Packit Service |
e7ae83 |
"key": {
|
|
Packit Service |
e7ae83 |
"payload": {
|
|
Packit Service |
e7ae83 |
"field": "dscp",
|
|
Packit Service |
e7ae83 |
"protocol": "ip"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
},
|
|
Packit Service |
e7ae83 |
"value": "cs0"
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
}
|
|
Packit Service |
e7ae83 |
]
|
|
Packit Service |
e7ae83 |
|