diff options
Diffstat (limited to 'test/output/address')
-rw-r--r-- | test/output/address/dump | 12 | ||||
-rw-r--r-- | test/output/address/rules-save | 1 | ||||
-rw-r--r-- | test/output/address/rules6-save | 1 |
3 files changed, 13 insertions, 1 deletions
diff --git a/test/output/address/dump b/test/output/address/dump index af338a6..be86a63 100644 --- a/test/output/address/dump +++ b/test/output/address/dump @@ -8085,6 +8085,9 @@ Log dual {"mirror":"fc00::1","mode":"log"} Log mirror {"mirror":["10.0.0.1","10.0.0.2","fc00::2"]} (log) +Log nflog {"group":1,"mode":"nflog","range":128} +(log) + Log none {"mode":"none"} (log) @@ -8141,7 +8144,12 @@ Packet-log 2 {"log":"mirror","out":"_fw"} inet/filter/INPUT -j TEE --gateway 10.0.0.2 inet6/filter/INPUT -j TEE --gateway fc00::2 -Packet-log 3 {"log":"ulog","out":"_fw"} +Packet-log 3 {"log":"nflog","out":"_fw"} +(log) + inet/filter/INPUT -j NFLOG --nflog-group 1 --nflog-size 128 + inet6/filter/INPUT -j NFLOG --nflog-group 1 --nflog-size 128 + +Packet-log 4 {"log":"ulog","out":"_fw"} (log) inet/filter/INPUT -m limit --limit 12/minute -j ULOG @@ -10306,6 +10314,7 @@ hash:net family inet -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j NFLOG --nflog-group 1 --nflog-size 128 -A INPUT -j TEE --gateway 10.0.0.2 -A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG @@ -13186,6 +13195,7 @@ COMMIT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j NFLOG --nflog-group 1 --nflog-size 128 -A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT diff --git a/test/output/address/rules-save b/test/output/address/rules-save index 9000c6c..7af7160 100644 --- a/test/output/address/rules-save +++ b/test/output/address/rules-save @@ -1950,6 +1950,7 @@ -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j NFLOG --nflog-group 1 --nflog-size 128 -A INPUT -j TEE --gateway 10.0.0.2 -A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG diff --git a/test/output/address/rules6-save b/test/output/address/rules6-save index c3e0e74..47efb3c 100644 --- a/test/output/address/rules6-save +++ b/test/output/address/rules6-save @@ -571,6 +571,7 @@ -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j NFLOG --nflog-group 1 --nflog-size 128 -A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT |