On 06/17/2010 01:26 PM, Daniel P. Berrange wrote:
On Fri, Jun 11, 2010 at 02:02:11PM -0400, Stefan Berger wrote:
This patch adds an optional XML attribute to a nwfilter rule to give the user control over whether the rule is supposed to be using the state match or not. A rule may now look like shown in the XML below with the statematch attribute either having value '0' or 'false' (case-insensitive).
[...] <rule action='accept' direction='in' statematch='false'> <tcp srcmacaddr='1:2:3:4:5:6' srcipaddr='10.1.2.3' srcipmask='32' dscp='33' srcportstart='20' srcportend='21' dstportstart='100' dstportend='1111'/> </rule> [...]
I am also extending the nwfilter schema and add this attribute to a test case.
V2: - Following D. Berrange's suggestion I inverted the logic from 'nomatch' XML attribute to statematch attribute
ACK
Pushed. Stefan