On 06/17/2010 01:26 PM, Daniel P. Berrange wrote:
On Fri, Jun 11, 2010 at 02:02:11PM -0400, Stefan Berger wrote:
> This patch adds an optional XML attribute to a nwfilter rule to give the
> user control over whether the rule is supposed to be using the state
> match or not. A rule may now look like shown in the XML below with the
> statematch attribute either having value '0' or 'false'
(case-insensitive).
>
> [...]
> <rule action='accept' direction='in'
statematch='false'>
> <tcp srcmacaddr='1:2:3:4:5:6'
> srcipaddr='10.1.2.3' srcipmask='32'
> dscp='33'
> srcportstart='20' srcportend='21'
> dstportstart='100' dstportend='1111'/>
> </rule>
> [...]
>
> I am also extending the nwfilter schema and add this attribute to a test
> case.
>
> V2:
> - Following D. Berrange's suggestion I inverted the logic from
> 'nomatch' XML attribute to statematch attribute
>
ACK
Pushed.
Stefan