libxt_hashlimit: add new unit test to catch kernel bug

commit ad5b55761956427f61ed9c96961bf9c5cd4f92dc
Author: Alban Browaeys <alban.browaeys@gmail.com>
Date:   Mon Feb 6 23:50:33 2017 +0100

    netfilter: xt_hashlimit: Fix integer divide round to zero.

http://patchwork.ozlabs.org/patch/724800/

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/extensions/libxt_hashlimit.t b/extensions/libxt_hashlimit.t
index d27c861654d62d8f1450764bd8442d894d6b3d2b..a163fdfad55042967f7e618a2276fbe2696cff7f 100644 (file)
--- a/extensions/libxt_hashlimit.t
+++ b/extensions/libxt_hashlimit.t
@@ -26,3 +26,4 @@
 -m hashlimit --hashlimit-name mini1;;FAIL
 -m hashlimit --hashlimit-upto 1/sec;;FAIL
 -m hashlimit;;FAIL
+-m hashlimit --hashlimit-upto 40/sec --hashlimit-burst 20 --hashlimit-mode srcip --hashlimit-name syn-flood;=;OK