detect double negation

[ferm.git] / test / modules / policy.ferm

table filter chain INPUT mod policy {
    dir out strict spi 0xbeef proto esp mode transport ACCEPT;
    mode tunnel tunnel-src 192.168.1.2 tunnel-dst 192.168.2.1 ACCEPT;
    next DROP;
    proto esp protocol tcp REJECT;
}