[pve-firewall.git] / test / test-basic1 / tests

# example test rules

{ from => 'ct200', to => 'host', dport => 22, action => 'ACCEPT' }
{ from => 'ct200', to => 'host', dport => 23, action => 'DROP' }

{ from => 'vm100', to => 'host', dport => 22, action => 'ACCEPT' }

{ from => 'host' , to => 'ct200', dport => 80, action => 'DROP' }
{ from => 'host' , to => 'ct200', dport => 22, action => 'ACCEPT' }

{ from => 'host' , to => 'vm100', dport => 80, action => 'DROP' }

{ from => 'ct200' , to => 'vm100', dport => 80, action => 'DROP' }

{ from => 'vm100' , to => 'ct200', dport => 22, action => 'ACCEPT' }

{ from => 'vm101', to => 'vm100', dport => 22, action => 'DROP' }
{ from => 'vm101', to => 'vm100', dport => 443, action => 'ACCEPT', id => 'vm2vm'}

{ from => 'ct201', to => 'ct200', dport => 22, action => 'ACCEPT' }
{ from => 'ct201', to => 'ct200', dport => 23, action => 'DROP' }

{ from => 'vm110', to => 'vm100', dport => 22, action => 'DROP' }
{ from => 'vm110', to => 'vm100', dport => 443, action => 'ACCEPT' }

{ from => 'outside', to => 'ct200', dport => 22, action => 'ACCEPT' }
{ from => 'outside', to => 'ct200', dport => 23, action => 'DROP' }
{ from => 'outside', to => 'vm100', dport => 22, action => 'DROP' }
{ from => 'outside', to => 'vm100', dport => 443, action => 'ACCEPT' }
{ from => 'outside', to => 'host', dport => 22, action => 'ACCEPT' }
{ from => 'outside', to => 'host', dport => 23, action => 'DROP' }

{ from => 'host' , to => 'outside', dport => 80, action => 'ACCEPT'}
{ from => 'host' , to => 'outside', dport => 81, action => 'REJECT' }
{ from => 'vm100' , to => 'outside', dport => 80, action => 'ACCEPT' }
{ from => 'vm100' , to => 'outside', dport => 81, action => 'REJECT' }
{ from => 'ct200' , to => 'outside', dport => 80, action => 'ACCEPT' }
{ from => 'ct200' , to => 'outside', dport => 81, action => 'REJECT' }
Commit	Line	Data
f1bafd37 DM	1	# example test rules
	2
	3	{ from => 'ct200', to => 'host', dport => 22, action => 'ACCEPT' }
	4	{ from => 'ct200', to => 'host', dport => 23, action => 'DROP' }
	5
	6	{ from => 'vm100', to => 'host', dport => 22, action => 'ACCEPT' }
	7
	8	{ from => 'host' , to => 'ct200', dport => 80, action => 'DROP' }
	9	{ from => 'host' , to => 'ct200', dport => 22, action => 'ACCEPT' }
	10
	11	{ from => 'host' , to => 'vm100', dport => 80, action => 'DROP' }
	12
	13	{ from => 'ct200' , to => 'vm100', dport => 80, action => 'DROP' }
	14
	15	{ from => 'vm100' , to => 'ct200', dport => 22, action => 'ACCEPT' }
	16
d1486f38	17	{ from => 'vm101', to => 'vm100', dport => 22, action => 'DROP' }
ec2e28f6	18	{ from => 'vm101', to => 'vm100', dport => 443, action => 'ACCEPT', id => 'vm2vm'}
d1486f38 DM	19
	20	{ from => 'ct201', to => 'ct200', dport => 22, action => 'ACCEPT' }
	21	{ from => 'ct201', to => 'ct200', dport => 23, action => 'DROP' }
	22
	23	{ from => 'vm110', to => 'vm100', dport => 22, action => 'DROP' }
	24	{ from => 'vm110', to => 'vm100', dport => 443, action => 'ACCEPT' }
	25
31dc73f1 DM	26	{ from => 'outside', to => 'ct200', dport => 22, action => 'ACCEPT' }
	27	{ from => 'outside', to => 'ct200', dport => 23, action => 'DROP' }
	28	{ from => 'outside', to => 'vm100', dport => 22, action => 'DROP' }
	29	{ from => 'outside', to => 'vm100', dport => 443, action => 'ACCEPT' }
	30	{ from => 'outside', to => 'host', dport => 22, action => 'ACCEPT' }
	31	{ from => 'outside', to => 'host', dport => 23, action => 'DROP' }
	32
ec2e28f6	33	{ from => 'host' , to => 'outside', dport => 80, action => 'ACCEPT'}
31dc73f1 DM	34	{ from => 'host' , to => 'outside', dport => 81, action => 'REJECT' }
	35	{ from => 'vm100' , to => 'outside', dport => 80, action => 'ACCEPT' }
	36	{ from => 'vm100' , to => 'outside', dport => 81, action => 'REJECT' }
	37	{ from => 'ct200' , to => 'outside', dport => 80, action => 'ACCEPT' }
	38	{ from => 'ct200' , to => 'outside', dport => 81, action => 'REJECT' }
	39
d1486f38	40