extensions: test protocol and interface negation

Signed-off-by: Florian Westphal <fw@strlen.de>

diff --git a/extensions/iptables.t b/extensions/iptables.t
index 65456ee9874d7922e1b6346ab35804483eb42749..b4b6d677abab14af4097225d140c7eb5ec074cf4 100644 (file)
--- a/extensions/iptables.t
+++ b/extensions/iptables.t
@@ -2,3 +2,5 @@
 -i alongifacename0;=;OK
 -i thisinterfaceistoolong0;;FAIL
 -i eth+ -o alongifacename+;=;OK
+! -i eth0;=;OK
+! -o eth+;=;OK

diff --git a/extensions/libxt_standard.t b/extensions/libxt_standard.t
index bfdedb7aa906dfe8abd0ee506d958b56876c16a9..4313f7b7bac9d3d68d5e2be7104b9997fa7d4ad5 100644 (file)
--- a/extensions/libxt_standard.t
+++ b/extensions/libxt_standard.t
@@ -3,6 +3,9 @@
 ! -s 0.0.0.0 -j ACCEPT;! -s 0.0.0.0/32 -j ACCEPT;OK
 ! -d 0.0.0.0/32 -j ACCEPT;=;OK
 -s 0.0.0.0/24 -j RETURN;=;OK
+-p tcp -j ACCEPT;=;OK
+! -p udp -j ACCEPT;=;OK
 -j DROP;=;OK
 -j ACCEPT;=;OK
 -j RETURN;=;OK
+! -p 0 -j ACCEPT;=;FAIL