]> git.proxmox.com Git - pve-firewall.git/blob - test/test-basic1/tests
fwtester: implement new 'outside' zone
[pve-firewall.git] / test / test-basic1 / tests
1 # example test rules
2
3 { from => 'ct200', to => 'host', dport => 22, action => 'ACCEPT' }
4 { from => 'ct200', to => 'host', dport => 23, action => 'DROP' }
5
6 { from => 'vm100', to => 'host', dport => 22, action => 'ACCEPT' }
7
8 { from => 'host' , to => 'ct200', dport => 80, action => 'DROP' }
9 { from => 'host' , to => 'ct200', dport => 22, action => 'ACCEPT' }
10
11 { from => 'host' , to => 'vm100', dport => 80, action => 'DROP' }
12
13 { from => 'ct200' , to => 'vm100', dport => 80, action => 'DROP' }
14
15 { from => 'vm100' , to => 'ct200', dport => 22, action => 'ACCEPT' }
16
17 { from => 'vm101', to => 'vm100', dport => 22, action => 'DROP' }
18 { from => 'vm101', to => 'vm100', dport => 443, action => 'ACCEPT' }
19
20 { from => 'ct201', to => 'ct200', dport => 22, action => 'ACCEPT' }
21 { from => 'ct201', to => 'ct200', dport => 23, action => 'DROP' }
22
23 { from => 'vm110', to => 'vm100', dport => 22, action => 'DROP' }
24 { from => 'vm110', to => 'vm100', dport => 443, action => 'ACCEPT' }
25
26 { from => 'outside', to => 'ct200', dport => 22, action => 'ACCEPT' }
27 { from => 'outside', to => 'ct200', dport => 23, action => 'DROP' }
28 { from => 'outside', to => 'vm100', dport => 22, action => 'DROP' }
29 { from => 'outside', to => 'vm100', dport => 443, action => 'ACCEPT' }
30 { from => 'outside', to => 'host', dport => 22, action => 'ACCEPT' }
31 { from => 'outside', to => 'host', dport => 23, action => 'DROP' }
32
33 { from => 'host' , to => 'outside', dport => 80, action => 'ACCEPT' }
34 { from => 'host' , to => 'outside', dport => 81, action => 'REJECT' }
35 { from => 'vm100' , to => 'outside', dport => 80, action => 'ACCEPT' }
36 { from => 'vm100' , to => 'outside', dport => 81, action => 'REJECT' }
37 { from => 'ct200' , to => 'outside', dport => 80, action => 'ACCEPT' }
38 { from => 'ct200' , to => 'outside', dport => 81, action => 'REJECT' }
39
40