blob: 10cdb7a44082e4502641fda6f60851fc6c25b3b7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
:input;type filter hook input priority 0
:ingress;type filter hook ingress device lo priority 0
:egress;type filter hook egress device lo priority 0
*ip;test-ip4;input
*ip6;test-ip6;input
*inet;test-inet;input
*netdev;test-netdev;ingress,egress
vxlan vni 10;fail
udp dport 4789 vxlan vni 10;ok
udp dport 4789 vxlan ip saddr 10.141.11.2;ok
udp dport 4789 vxlan ip saddr 10.141.11.0/24;ok
udp dport 4789 vxlan ip protocol 1;ok
udp dport 4789 vxlan udp sport 8888;ok
udp dport 4789 vxlan icmp type echo-reply;ok
udp dport 4789 vxlan ether saddr 62:87:4d:d6:19:05;ok
udp dport 4789 vxlan vlan id 10;ok
udp dport 4789 vxlan ip dscp 0x02;ok
udp dport 4789 vxlan ip dscp 0x02;ok
udp dport 4789 vxlan ip saddr . vxlan ip daddr { 1.2.3.4 . 4.3.2.1 };ok
udp dport 4789 vxlan ip saddr set 1.2.3.4;fail
|
