From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Fri, 30 Oct 2020 19:36:22 +0000 (+0100)
Subject: tests: shell: exercise validation with nft -c
X-Git-Tag: v0.9.8~57
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=673b9d3f2630f812bcef95666a1097747844c92b;p=thirdparty%2Fnftables.git

tests: shell: exercise validation with nft -c

Using oif in fib from prerouting is not support, make sure -c reports an
error.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/tests/shell/testcases/nft-f/0023check_1 b/tests/shell/testcases/nft-f/0023check_1
new file mode 100755
index 00000000..42793b6e
--- /dev/null
+++ b/tests/shell/testcases/nft-f/0023check_1
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+RULESET="table ip foo {
+	chain bar {
+		type filter hook prerouting priority 0;
+	}
+}"
+
+$NFT -f - <<< "$RULESET"
+
+$NFT -c add rule foo bar fib saddr . oif type local && exit 1
+exit 0