Extend tests to cover destroy command for chains, flowtables, sets,
maps. In addition rename a destroy command test for rules with a
duplicated number.
Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
18 files changed:
--- /dev/null
+#!/bin/bash
+
+set -e
+
+$NFT add table t
+
+$NFT destroy chain t nochain
--- /dev/null
+#!/bin/bash
+
+set -e
+
+$NFT add table t
+$NFT add chain t c
+
+$NFT destroy chain t c
--- /dev/null
+table ip t {
+}
--- /dev/null
+table ip t {
+}
--- /dev/null
+#!/bin/bash
+
+set -e
+$NFT add table t
+$NFT add flowtable t f { hook ingress priority 10 \; devices = { lo }\; }
+
+$NFT destroy flowtable t f
--- /dev/null
+#!/bin/bash
+
+set -e
+$NFT add table t
+
+$NFT destroy flowtable t f
--- /dev/null
+table ip t {
+}
--- /dev/null
+table ip t {
+}
--- /dev/null
+#!/bin/bash
+
+set -e
+
+$NFT add table x
+$NFT add map x y { type ipv4_addr : ipv4_addr\; }
+
+$NFT destroy map x y
--- /dev/null
+#!/bin/bash
+
+set -e
+
+$NFT add table x
+
+$NFT destroy map x nonmap
--- /dev/null
+table ip x {
+}
--- /dev/null
+table ip x {
+}
--- /dev/null
+#!/bin/bash
+
+set -e
+
+$NFT add table x
+$NFT add set x s {type ipv4_addr\; size 2\;}
+
+$NFT destroy set x s
--- /dev/null
+#!/bin/bash
+
+set -e
+
+$NFT add table x
+
+$NFT destroy set x s
--- /dev/null
+table ip x {
+}
--- /dev/null
+table ip x {
+}