diff options
| author |   Stefan Berger <stefanb@us.ibm.com> | 2010-04-27 07:26:12 -0400 |
|---|---|---|
| committer | Stefan Berger <stefanb@us.ibm.com> | 2010-04-27 07:26:12 -0400 |
| commit | aea68ce9064cf608530bf0326b7160b789089066 (patch) | |
| tree | 8cff549c12438cd47855496493e4afe5ed35e5e6 /tests/nwfilterxml2xmlin | |
| parent | Ignore qemu STOP event when stopping CPUs (diff) | |
| download | libvirt-aea68ce9064cf608530bf0326b7160b789089066.tar.gz libvirt-aea68ce9064cf608530bf0326b7160b789089066.tar.bz2 libvirt-aea68ce9064cf608530bf0326b7160b789089066.zip | |
nwfilter: add support for RAPR protocol
This patch adds support for the RARP protocol. This may be needed due to
qemu sending out a RARP packet (at least that's what it seems to want to
do even though the protocol id is wrong) when migration finishes and
we'd need a rule to let the packets pass.
Unfortunately my installation of ebtables does not understand -p RARP
and also seems to otherwise depend on strings in /etc/ethertype
translated to protocol identifiers. Therefore I need to pass -p 0x8035
for RARP. To generally get rid of the dependency of that file I switch
all so far supported protocols to use their protocol identifier in the
-p parameter rather than the string.
I am also extending the schema and added a test case.
changes from v1 to v2:
- added test case into patch
Diffstat (limited to 'tests/nwfilterxml2xmlin')
| -rw-r--r-- | tests/nwfilterxml2xmlin/rarp-test.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/tests/nwfilterxml2xmlin/rarp-test.xml b/tests/nwfilterxml2xmlin/rarp-test.xml new file mode 100644 index 000000000..e08722204 --- /dev/null +++ b/tests/nwfilterxml2xmlin/rarp-test.xml @@ -0,0 +1,33 @@ +<filter name='testcase'> + <uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid> + <rule action='accept' direction='out'> + <rarp srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff' + protocolid='rarp' + dstmacaddr='aa:bb:cc:dd:ee:ff' dstmacmask='ff:ff:ff:ff:ff:ff' + hwtype='12' + protocoltype='34' + opcode='Request' + arpsrcmacaddr='1:2:3:4:5:6' + arpdstmacaddr='a:b:c:d:e:f'/> + </rule> + + <rule action='accept' direction='out'> + <rarp srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff' + opcode='1' hwtype='255' protocoltype='255'/> + </rule> + + <rule action='accept' direction='out'> + <rarp srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff' + opcode='11' hwtype='256' protocoltype='256'/> + </rule> + + <rule action='accept' direction='out'> + <rarp srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff' + opcode='65535' hwtype='65535' protocoltype='65535' /> + </rule> + + <rule action='accept' direction='out'> + <rarp srcmacaddr='1:2:3:4:5:6' srcmacmask='ff:ff:ff:ff:ff:ff' + opcode='65536' hwtype='65536' protocoltype='65536' /> + </rule> +</filter> |