From: Pablo Neira Ayuso Date: Sat, 20 Apr 2013 10:52:45 +0000 (+0200) Subject: tests: dictionary: update examples to use the current syntax X-Git-Tag: v0.099~117 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3cb8834b39f8f6c27607698e485fcc7ff96815fa;p=thirdparty%2Fnftables.git tests: dictionary: update examples to use the current syntax Signed-off-by: Pablo Neira Ayuso --- diff --git a/tests/dictionary b/tests/dictionary index e489c4ec..aad9ebeb 100644 --- a/tests/dictionary +++ b/tests/dictionary @@ -1,52 +1,52 @@ #! nft -f # add table ip filter -add chain ip filter OUTPUT NF_INET_LOCAL_OUT 0 +add chain ip filter output { hook NF_INET_LOCAL_OUT 0 ; } add chain ip filter chain1 -add rule ip filter chain1 handle 1 counter +add rule ip filter chain1 counter add chain ip filter chain2 -add rule ip filter chain2 handle 1 counter +add rule ip filter chain2 counter # must succeed: expr { expr, ... } -add rule ip filter OUTPUT ip protocol 6 tcp dport { \ +add rule ip filter OUTPUT tcp dport { \ 22, \ 23, \ } # must fail: expr { type1, type2, ... } -add rule ip filter OUTPUT ip protocol 6 tcp dport { \ +add rule ip filter OUTPUT tcp dport { \ 22, \ 192.168.0.1, \ } # must succeed: expr { expr => verdict, ... } -add rule ip filter OUTPUT ip protocol 6 tcp dport { \ +add rule ip filter OUTPUT tcp dport vmap { \ 22 => jump chain1, \ 23 => jump chain2, \ } # must fail: expr { expr => verdict, expr => expr, ... } -add rule ip filter OUTPUT ip protocol 6 tcp dport { \ +add rule ip filter OUTPUT tcp dport vmap { \ 22 => jump chain1, \ 23 => 0x100, \ } # must fail: expr { expr => expr, ...} -add rule ip filter OUTPUT ip protocol 6 tcp dport { \ +add rule ip filter OUTPUT tcp dport vmap { \ 22 => 0x100, \ 23 => 0x200, \ } # must succeed: expr MAP { expr => expr, ... } expr -add rule ip filter OUTPUT ip protocol 6 map tcp dport { \ +add rule ip filter OUTPUT meta mark set tcp dport map { \ 22 => 1, \ 23 => 2, \ -} 2 +} # must fail: expr MAP { expr => type1, expr => type2, .. } expr -add rule ip filter OUTPUT ip protocol 6 map tcp dport { \ +add rule ip filter OUTPUT meta mark set tcp dport map { \ 22 => 1, \ 23 => 192.168.0.1, \ -} 2 +}