X-Git-Url: http://git.openwrt.org/?a=blobdiff_plain;f=tests%2F03_rules%2F03_constraints;h=05fb3799ddc891daf46b025e9522663ec17cda64;hb=22c53921c11115e5437385719b6e73800a68cd33;hp=eb3272fb41d7d2039ac5fccf868a737c41d3afa7;hpb=785798c8fd72ff3c4c8940922173290bb25bc18e;p=project%2Ffirewall4.git

diff --git a/tests/03_rules/03_constraints b/tests/03_rules/03_constraints
index eb3272f..05fb379 100644
--- a/tests/03_rules/03_constraints
+++ b/tests/03_rules/03_constraints
@@ -107,13 +107,13 @@ table inet fw4 {
 
 		iifname "lo" accept comment "!fw4: Accept traffic from loopback"
 
-		ct state vmap { established : accept, related : accept } comment "!fw4: Handle inbound flows"
+		ct state established,related accept comment "!fw4: Allow inbound established and related flows"
 	}
 
 	chain forward {
 		type filter hook forward priority filter; policy drop;
 
-		ct state vmap { established : accept, related : accept } comment "!fw4: Handle forwarded flows"
+		ct state established,related accept comment "!fw4: Allow forwarded established and related flows"
 	}
 
 	chain output {
@@ -121,7 +121,7 @@ table inet fw4 {
 
 		oifname "lo" accept comment "!fw4: Accept traffic towards loopback"
 
-		ct state vmap { established : accept, related : accept } comment "!fw4: Handle outbound flows"
+		ct state established,related accept comment "!fw4: Allow outbound established and related flows"
 		meta nfproto ipv4 ip dscp 0x0 counter comment "!fw4: DSCP match rule #1"
 		meta nfproto ipv6 ip6 dscp 0x0 counter comment "!fw4: DSCP match rule #1"
 	}