a little nicer wrt pep8

[sfa.git] / sfatables / targets / RESTRICT_SLICE_DOMAIN.xml

diff --git a/sfatables/targets/RESTRICT_SLICE_DOMAIN.xml b/sfatables/targets/RESTRICT_SLICE_DOMAIN.xml
index d110652..3fc0841 100644 (file)
--- a/sfatables/targets/RESTRICT_SLICE_DOMAIN.xml
+++ b/sfatables/targets/RESTRICT_SLICE_DOMAIN.xml
@@ -8,7 +8,7 @@
             <operand>SUFFIX</operand>
         </argument>
         <argument>
-            <name>blacklist-dns-suffix/name>
+            <name>blacklist-dns-suffix</name>
             <help>Suffix of nodes to blacklist for this match.</help>
             <operand>SUFFIX</operand>
         </argument>
@@ -29,4 +29,35 @@
         </argument>
         <processor filename="restrict_to_nodes.xsl"/>
     </rule>
+    <rule element="flowspec">
+        <context select=""/>
+        <argument>
+            <name>whitelist-switch</name>
+            <help>Switch id to whitelist.</help>
+            <operand>PREFIX</operand>
+        </argument>
+
+        <argument>
+            <name>whitelist-tpsrc</name>
+            <help>Source port to whitelist.</help>
+            <operand>PREFIX</operand>
+        </argument>
+        <argument>
+            <name>whitelist-tpdst</name>
+            <help>Destination port to whitelist.</help>
+            <operand>PREFIX</operand>
+        </argument>
+        <argument>
+            <name>whitelist-ipdst</name>
+            <help>Destination IP to whitelist.</help>
+            <operand>PREFIX</operand>
+        </argument>
+        <argument>
+            <name>whitelist-ipsrc</name>
+            <help>Source IP to whitelist.</help>
+            <operand>PREFIX</operand>
+        </argument>
+
+        <processor filename="restrict_flowspec.xsl"/>
+    </rule>
 </target>