add security group tests

[pve-firewall.git] / test / test-group1 / cluster.fw

diff --git a/test/test-group1/cluster.fw b/test/test-group1/cluster.fw
new file mode 100644 (file)
index 0000000..c520a74
--- /dev/null
+++ b/test/test-group1/cluster.fw
@@ -0,0 +1,14 @@
+[OPTIONS]
+
+enable: 1
+
+[GROUP group1]
+
+IN ACCEPT 192.168.2.0/24 - tcp 22 
+IN REJECT 192.168.2.0/24 - tcp 80 
+OUT REJECT 192.168.2.0/24 - tcp 80 
+OUT REJECT - - tcp 443 
+
+[GROUP group2]
+
+IN ACCEPT 192.168.3.0/24 - tcp 22