]> git.ipfire.org Git - thirdparty/nftables.git/commitdiff
tests: fix inet nat prio tests
authorFlorian Westphal <fw@strlen.de>
Wed, 2 Aug 2023 14:19:45 +0000 (16:19 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 2 Nov 2023 10:56:20 +0000 (11:56 +0100)
commit 76835278e00af29d708e0085461c1cd79fb4050e upstream.

Its legal to DNAT in output and SNAT in input chain, so don't test
for that being illegal.

Fixes: 8beafab74c39 ("rule: allow src/dstnat prios in input and output")
Fixes: 34ce4e4a7bb6 ("test: shell: Test cases for standard chain prios")
Signed-off-by: Florian Westphal <fw@strlen.de>
tests/shell/testcases/chains/0023prio_inet_srcnat_1
tests/shell/testcases/chains/0024prio_inet_dstnat_1

index d2b1fa431ee6d1ec830f56e73ffd10c87b0193de..e4a668e1899bffb80c80184a4f8f74768877c58e 100755 (executable)
@@ -2,7 +2,7 @@
 
 for family in ip ip6 inet
 do
-       for hook in prerouting input forward output
+       for hook in prerouting forward output
        do
                $NFT add table $family x
                $NFT add chain $family x y "{ type filter hook $hook priority srcnat; }" &> /dev/null
index d112f2c958c02502730e8b4a8c4931810331bd05..f1b802a05b0f8a8b990a21d3e811f19d0426c06b 100755 (executable)
@@ -2,7 +2,7 @@
 
 for family in ip ip6 inet
 do
-       for hook in input forward output postrouting
+       for hook in input forward postrouting
        do
                $NFT add table $family x
                $NFT add chain $family x y "{ type filter hook $hook priority dstnat; }" &> /dev/null