576 lines
41 KiB
Plaintext
576 lines
41 KiB
Plaintext
*** Settings ***
|
|
Force Tags tsg_adc_wp adc_api proxy_policy
|
|
Library OperatingSystem
|
|
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
|
|
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
|
|
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
|
|
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
|
|
Resource ../../../02-Keyword/tsg_bfapi/policy_object/Policy.robot
|
|
Resource ../../../03-Variable/ApplicationID.txt
|
|
|
|
*** Variables ***
|
|
${url} /v1/policy/profile/responsepages
|
|
|
|
*** Test Cases ***
|
|
Proxy-Policy-deny-00001
|
|
[Tags] fqdn完整匹配 update policy:ip geo,fqdn
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$newsela.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建ip geo
|
|
${addItemList1} Create Dictionary keywordArray=XXG地区.*
|
|
${addItemLists} Create list ${addItemList1}
|
|
${objectDict} Create Dictionary objectType=ip objectSubType=geo_location isValid=${1} addItemList=${addItemLists}
|
|
${rescode} ${objectId1} AddObjects ${1} ${objectDict}
|
|
Comment 创建fqdn2
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*newsela.com
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00001 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"重新开始","code":403,"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId ${objectId}
|
|
insert_policyId_to_file1 deny_objectId46 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId47 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId ${policyId2}
|
|
|
|
Proxy-Policy-deny-00002
|
|
[Tags] fqdn_category
|
|
Comment 创建fqdn
|
|
# ${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=*villaday.com
|
|
# ${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment #创建引用文件
|
|
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
|
|
${profiledId} Get From Dictionary ${response} profileId
|
|
Comment Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=165|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00002 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","html_profile":${profiledId},"code":403,"protocol":"HTTP"} filterList=165|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_profileId ${profiledId}
|
|
#insert_policyId_to_file1 deny_objectId1 ${objectId}
|
|
insert_policyId_to_file1 intercept_deny_policyId1 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId1 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00003
|
|
[Tags] url4种匹配
|
|
Comment 创建fqdn
|
|
# ${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=*wmtransfer.com,*banbaowang.com,*qidian.com,*rolandberger.com
|
|
# ${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=railw*,$creativetravelgroup.com/,*hinabian.com,smithsonianjourneys
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment #创建引用文件
|
|
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
|
|
${profiledId} Get From Dictionary ${response} profileId
|
|
Comment Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=162|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00003 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","html_profile":${profiledId},"code":404,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_profileId1 ${profiledId}
|
|
#insert_policyId_to_file1 deny_objectId2 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId3 ${objectId1}
|
|
insert_policyId_to_file1 intercept_deny_policyId2 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId2 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00004
|
|
[Tags] 请求头左匹配 update policy:url,请求头
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*usdebtclock.org
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=state-of-california-debt-clock.html
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=Mozilla/5.0*|User-Agent
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url2
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=bbs.nga.cn/
|
|
${rescode} ${objectId3} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头2
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=Mozilla/5.0|User-Agent
|
|
${rescode} ${objectId4} AddObject2 ${1} ${objectDict}
|
|
Comment 创建fqdn2
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*nga.cn
|
|
${rescode} ${objectId5} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00004 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"qwertyuiop","code":404,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_REQ_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId4 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId5 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId6 ${objectId2}
|
|
insert_policyId_to_file1 deny_objectId48 ${objectId3}
|
|
insert_policyId_to_file1 deny_objectId49 ${objectId4}
|
|
insert_policyId_to_file1 deny_objectId50 ${objectId5}
|
|
insert_policyId_to_file1 intercept_deny_policyId3 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId3 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00005
|
|
[Tags] 请求头完整匹配
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$americantesol.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=tesol-register
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=$Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/31.0.1650.63 Safari/537.36|User-Agent
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00005 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"онлайн фильмы","code":451,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_REQ_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId7 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId8 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId9 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId4 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId4 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00006
|
|
[Tags] 请求头字串匹配
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.playgroundsessions.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=software-features
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=AppleWebKit|User-Agent
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00006 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"明天大涨","code":404,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_REQ_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId10 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId11 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId12 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId5 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId5 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00007
|
|
[Tags] 请求头右匹配
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$peoplestalkradio.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=forums/register.php
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=*Safari/537.36|User-Agent
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00007 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"今天中奖","code":403,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_REQ_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId13 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId14 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId15 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId6 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId6 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00008
|
|
[Tags] 应答头右匹配 update policy:fqdn,url,应答头
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*6renyou.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=user_comment
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建应答头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=*utf-8|Content-Type
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建引用文件
|
|
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
|
|
${profiledId} Get From Dictionary ${response} profileId
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*.tianya.cn
|
|
${rescode} ${objectId3} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=bbs.tianya.cn
|
|
${rescode} ${objectId4} AddObject2 ${1} ${objectDict}
|
|
Comment 创建应答头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=*UTF-8|Content-Type
|
|
${rescode} ${objectId5} AddObject2 ${1} ${objectDict}
|
|
Comment Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00008 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","html_profile":${profiledId},"code":451,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_profileId2 ${profiledId}
|
|
insert_policyId_to_file1 deny_objectId16 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId17 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId18 ${objectId2}
|
|
insert_policyId_to_file1 deny_objectId51 ${objectId3}
|
|
insert_policyId_to_file1 deny_objectId52 ${objectId4}
|
|
insert_policyId_to_file1 deny_objectId53 ${objectId5}
|
|
insert_policyId_to_file1 intercept_deny_policyId7 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId7 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00009
|
|
[Tags] 应答头完整匹配
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*ljale.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=webdir.html
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=$text/html; charset=utf-8|Content-Type
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment #创建引用文件
|
|
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
|
|
${profiledId} Get From Dictionary ${response} profileId
|
|
Comment Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00009 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","html_profile":${profiledId},"code":451,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_profileId3 ${profiledId}
|
|
insert_policyId_to_file1 deny_objectId19 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId20 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId21 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId8 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId8 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00010
|
|
[Tags] 应答头字串匹配
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*duckduckmoose.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=learn
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=text/html|Content-Type
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment #创建引用文件
|
|
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
|
|
${profiledId} Get From Dictionary ${response} profileId
|
|
Comment Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00010 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","html_profile":${profiledId},"code":451,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_profileId4 ${profiledId}
|
|
insert_policyId_to_file1 deny_objectId22 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId23 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId24 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId9 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId9 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00011
|
|
[Tags] 应答头左匹配
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*tutcandy.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=sketch-to
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=text*|Content-Type
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment #创建引用文件
|
|
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
|
|
${profiledId} Get From Dictionary ${response} profileId
|
|
Comment Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00011 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","html_profile":${profiledId},"code":451,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_profileId5 ${profiledId}
|
|
insert_policyId_to_file1 deny_objectId25 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId26 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId27 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId10 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId10 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00012
|
|
[Tags] cookie字串匹配
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.youqulu.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=zixun
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建cookie
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=saltkey|Cookie
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00012 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"123456789","code":403,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_REQ_HDR isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId28 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId29 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId30 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId11 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId11 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00013
|
|
[Tags] set-cookie4种匹配
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.nypl.org,*thailand.com.co,*ke.com,$nationalbank.kz
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建set-cookie
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=incap_ses*|Set-Cookie,*Max-Age=604800|Set-Cookie,domain=.ke.com|Set-Cookie,irkzadmin_session*|Set-Cookie
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=www.nypl.org,thailand.com.co,ke.com,nationalbank.kz
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00013 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"一直相信","code":403,"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_RES_HDR,${objectId2}|TSG_FIELD_HTTP_URL isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId31 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId32 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId46 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId12 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId12 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00014
|
|
[Tags] 请求体字串匹配 update policy:请求体
|
|
Comment 创建请求体
|
|
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=1234567
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*open.node.com
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求体2
|
|
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=denyTest0014
|
|
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00014 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"涨涨涨涨","code":404,"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_REQ_CONTENT isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId33 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId34 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId54 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId13 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId13 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00015
|
|
[Tags] 应答体字串匹配
|
|
Comment 创建应答体
|
|
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=ASDFG
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建应答体2
|
|
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=deny015
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00015 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"涨涨涨涨","code":404,"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_RES_CONTENT isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId35 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId55 ${objectId1}
|
|
insert_policyId_to_file1 deny_policyId14 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00016
|
|
[Tags] Sub Objects层级
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.stewart.com
|
|
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=*art.com/en.html
|
|
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
|
${addItemList} Create List ${objectId1}
|
|
${objectDict1} Create Dictionary objectType=url isValid=${1} subObjectIds=${addItemList}
|
|
${rescode} ${objectId2} AddObjects ${1} ${objectDict1}
|
|
Comment 创建引用文件
|
|
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
|
|
${profiledId} Get From Dictionary ${response} profileId
|
|
Comment Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00003 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","html_profile":${profiledId},"code":404,"protocol":"HTTP"} filterList=${objectId2}|TSG_FIELD_HTTP_URL isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_profileId6 ${profiledId}
|
|
insert_policyId_to_file1 deny_objectId47 ${objectId}
|
|
insert_policyId_to_file1 deny_objectId48 ${objectId1}
|
|
insert_policyId_to_file1 deny_objectId49 ${objectId2}
|
|
insert_policyId_to_file1 intercept_deny_policyId15 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId17 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00017
|
|
[Tags] 最大组合1
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*open.node.com
|
|
${rescode} ${object_fqdn_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=open
|
|
${rescode} ${object_url_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=Mozilla/5.0*|User-Agent
|
|
${rescode} ${object_qq_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建应答头
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=charset|Content-Type
|
|
${rescode} ${object_yd_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建请求体
|
|
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=mnbv
|
|
${rescode} ${object_body_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00016 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"涨涨涨涨","code":404,"protocol":"HTTP"} filterList=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL,${object_qq_Id}|TSG_FIELD_HTTP_REQ_HDR,${object_yd_Id}|TSG_FIELD_HTTP_RES_HDR,${object_body_Id}|TSG_FIELD_HTTP_REQ_CONTENT isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId36 ${object_fqdn_Id}
|
|
insert_policyId_to_file1 deny_objectId37 ${object_url_Id}
|
|
insert_policyId_to_file1 deny_objectId38 ${object_qq_Id}
|
|
insert_policyId_to_file1 deny_objectId39 ${object_yd_Id}
|
|
insert_policyId_to_file1 deny_objectId40 ${object_body_Id}
|
|
insert_policyId_to_file1 deny_policyId15 ${policyId2}
|
|
|
|
Proxy-Policy-deny-00018
|
|
[Tags] 最大组合2
|
|
Comment 创建fqdn
|
|
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.umusicpub.com
|
|
${rescode} ${object_fqdn_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建url
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=sicpub.com
|
|
${rescode} ${object_url_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建cookie
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=timezoneoffset|Cookie
|
|
${rescode} ${object_qq_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建set-cookie
|
|
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=Domain=.umusicpub.com|Set-Cookie
|
|
${rescode} ${object_yd_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建应答体
|
|
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=NOFOLLOW
|
|
${rescode} ${object_body_Id} AddObject2 ${1} ${objectDict}
|
|
Comment 创建拦截策略
|
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-deny policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${object_fqdn_Id}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=${SSL_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId1} AddPolicies 1 ${policyDict} v2
|
|
${policyId1} Get-Pids ${policyId1}
|
|
${policyId1} Set Variable ${policyId1}[0]
|
|
Comment 创建deny策略
|
|
${policyDict} Create Dictionary policyName=Proxy-Policy-deny-00017 policyType=pxy_manipulation policyDesc=autotest action=deny userRegion={"method":"block","message":"涨涨涨涨","code":404,"protocol":"HTTP"} filterList=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL,${object_qq_Id}|TSG_FIELD_HTTP_REQ_HDR,${object_yd_Id}|TSG_FIELD_HTTP_RES_HDR,${object_body_Id}|TSG_FIELD_HTTP_RES_CONTENT isValid=${1} appIdObjects=${HTTP_ID}
|
|
log ${policyDict}
|
|
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
|
${policyId2} Get-Pids ${policyId2}
|
|
${policyId2} Set Variable ${policyId2}[0]
|
|
insert_policyId_to_file1 deny_objectId41 ${object_fqdn_Id}
|
|
insert_policyId_to_file1 deny_objectId42 ${object_url_Id}
|
|
insert_policyId_to_file1 deny_objectId43 ${object_qq_Id}
|
|
insert_policyId_to_file1 deny_objectId44 ${object_yd_Id}
|
|
insert_policyId_to_file1 deny_objectId45 ${object_body_Id}
|
|
insert_policyId_to_file1 intercept_deny_policyId14 ${policyId1}
|
|
insert_policyId_to_file1 deny_policyId16 ${policyId2}
|