]> git.ipfire.org Git - thirdparty/nftables.git/commitdiff
test: py: Add test cases for socket matching
authorMáté Eckl <ecklm94@gmail.com>
Mon, 4 Jun 2018 07:36:32 +0000 (09:36 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 6 Jun 2018 17:52:45 +0000 (19:52 +0200)
Signed-off-by: Máté Eckl <ecklm94@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
tests/py/inet/socket.t [new file with mode: 0644]
tests/py/inet/socket.t.payload [new file with mode: 0644]

diff --git a/tests/py/inet/socket.t b/tests/py/inet/socket.t
new file mode 100644 (file)
index 0000000..8edfa78
--- /dev/null
@@ -0,0 +1,9 @@
+:sockchain;type filter hook prerouting priority -150
+
+*ip;sockip4;sockchain
+*ip6;sockip6;sockchain
+*inet;sockin;sockchain
+
+socket transparent 0;ok
+socket transparent 1;ok
+socket transparent 2;fail
diff --git a/tests/py/inet/socket.t.payload b/tests/py/inet/socket.t.payload
new file mode 100644 (file)
index 0000000..acad2ac
--- /dev/null
@@ -0,0 +1,30 @@
+# socket transparent 0
+ip sockip4 sockchain 
+  [ socket load transparent => reg 1 ]
+  [ cmp eq reg 1 0x00000000 ]
+
+# socket transparent 0
+ip6 sockip6 sockchain 
+  [ socket load transparent => reg 1 ]
+  [ cmp eq reg 1 0x00000000 ]
+
+# socket transparent 0
+inet sockin sockchain 
+  [ socket load transparent => reg 1 ]
+  [ cmp eq reg 1 0x00000000 ]
+
+# socket transparent 1
+ip sockip4 sockchain 
+  [ socket load transparent => reg 1 ]
+  [ cmp eq reg 1 0x00000001 ]
+
+# socket transparent 1
+ip6 sockip6 sockchain 
+  [ socket load transparent => reg 1 ]
+  [ cmp eq reg 1 0x00000001 ]
+
+# socket transparent 1
+inet sockin sockchain 
+  [ socket load transparent => reg 1 ]
+  [ cmp eq reg 1 0x00000001 ]
+