From a931115b4f26f4c69bc79f8b362dd194943d2a44 Mon Sep 17 00:00:00 2001 From: Jozsef Kadlecsik Date: Sun, 14 Sep 2014 21:50:28 +0200 Subject: Add test to check mark mapping Signed-off-by: Jozsef Kadlecsik --- tests/iptables.sh | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'tests/iptables.sh') diff --git a/tests/iptables.sh b/tests/iptables.sh index 03d2e09..c5b9bf7 100755 --- a/tests/iptables.sh +++ b/tests/iptables.sh @@ -99,9 +99,18 @@ timeout) $ipset n test hash:ip,port timeout 2 $cmd -A INPUT -j SET --add-set test src,src --timeout 10 --exist ;; +mangle) + $ipset n test hash:net $family skbinfo 2>/dev/null + $ipset a test 10.255.0.0/16 skbmark 0x1234 2>/dev/null + $cmd -t mangle -A INPUT -j SET --map-set test src --map-mark + $cmd -t mangle -A INPUT -m mark --mark 0x1234 -j LOG --log-prefix "in set mark: " + $cmd -t mangle -A INPUT -s 10.255.0.0/16 -j DROP + ;; stop) $cmd -F $cmd -X + $cmd -F -t mangle + $cmd -X -t mangle $ipset -F 2>/dev/null $ipset -X 2>/dev/null ;; -- cgit v1.2.3