Use the defined $NFT variable instead of calling the system nft binary directly.
Add a nat_ftp.nodump file to avoid the following check-tree.sh error:
ERR: "tests/shell/testcases/packetpath/nat_ftp" has no "tests/shell/testcases/packetpath/dumps/nat_ftp.{nft,nodump}" file.
Signed-off-by: Yi Chen <yiche@redhat.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
ip netns exec $C ping -q -6 2001:db8:ffff:22::1 -c1
assert_pass "topo initialization"
-ip netns exec $R nft -f - <<EOF
+ip netns exec $R $NFT -f - <<EOF
table ip6 filter {
flowtable f1 {
hook ingress priority -100
if [ ! -r /proc/net/nf_conntrack ]
then
- echo "E: nf_conntrack unreadable, skipping" >&2
+ echo "E: nf_conntrack unreadable, skipping" >&2
exit 77
fi
if [ $ret != 0 ]
then
echo "FAIL: ${@}"
- ip netns exec $R nft list ruleset
+ ip netns exec $R $NFT list ruleset
tcpdump -nnr ${PCAP}
test -r /proc/net/nf_conntrack && ip netns exec $R cat /proc/net/nf_conntrack
ip netns exec $R conntrack -S
reload_ruleset()
{
ip netns exec $R conntrack -F 2> /dev/null
- ip netns exec $R nft -f - <<-EOF
+ ip netns exec $R $NFT -f - <<-EOF
flush ruleset
table ip6 ftp_helper_nat_test {
ct helper ftp-standard {