]> git.ipfire.org Git - thirdparty/libvirt.git/commit
network: add more firewall test cases
authorLaine Stump <laine@redhat.com>
Fri, 21 Jun 2024 12:17:58 +0000 (08:17 -0400)
committerDaniel P. Berrangé <berrange@redhat.com>
Mon, 24 Jun 2024 12:51:04 +0000 (13:51 +0100)
commit397c0f4b01ae1b24806a145ffbd31a9a49126ae3
treefaa2bd15de2a9aadad3dfbbffecf4e25296a6541
parentaabf279ca07d9d5c3d2e6d4efd7d4c5bc2dd471e
network: add more firewall test cases

This patch adds some previously missing test cases that test for
proper firewall rule creation when the following are included in the
network definition:

* <forward dev='blah'>
* no forward element (an "isolated" network)
* nat port range when only ipv4 is nat-ed
* nat port range when both ipv4 & ipv6 are nated

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Laine Stump <laine@redhat.com>
13 files changed:
tests/networkxml2firewalldata/forward-dev-linux.iptables [new file with mode: 0644]
tests/networkxml2firewalldata/forward-dev-linux.nftables [new file with mode: 0644]
tests/networkxml2firewalldata/forward-dev.xml [new file with mode: 0644]
tests/networkxml2firewalldata/isolated-linux.iptables [new file with mode: 0644]
tests/networkxml2firewalldata/isolated-linux.nftables [new file with mode: 0644]
tests/networkxml2firewalldata/isolated.xml [new file with mode: 0644]
tests/networkxml2firewalldata/nat-port-range-ipv6-linux.iptables [new file with mode: 0644]
tests/networkxml2firewalldata/nat-port-range-ipv6-linux.nftables [new file with mode: 0644]
tests/networkxml2firewalldata/nat-port-range-ipv6.xml [new file with mode: 0644]
tests/networkxml2firewalldata/nat-port-range-linux.iptables [new file with mode: 0644]
tests/networkxml2firewalldata/nat-port-range-linux.nftables [new file with mode: 0644]
tests/networkxml2firewalldata/nat-port-range.xml [new file with mode: 0644]
tests/networkxml2firewalltest.c