From d3b9fa094d693f05a747eda21db715a5bbf8dbbc Mon Sep 17 00:00:00 2001 From: Jozsef Kadlecsik Date: Mon, 24 Jan 2011 18:14:01 +0100 Subject: Check ICMP and ICMPv6 with the set match and target in the testsuite "sendip" needs data otherwise ICMP/ICMPv6 gets truncated... --- tests/match_target6.t | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) (limited to 'tests/match_target6.t') diff --git a/tests/match_target6.t b/tests/match_target6.t index 58888bd..6f1fc3d 100644 --- a/tests/match_target6.t +++ b/tests/match_target6.t @@ -1,21 +1,43 @@ # Create sets and inet6 rules which call set match and SET target 0 ./iptables.sh inet6 start +# Check that 1002:1002:1002:1002::64,tcp:1025 is not in ipport set +1 ipset test ipport 1002:1002:1002:1002::64,tcp:1025 # Send probe packet from 1002:1002:1002:1002::64,tcp:1025 0 sendip -p ipv6 -6d ::1 -6s 1002:1002:1002:1002::64 -p tcp -td 80 -ts 1025 ::1 # Check that proper sets matched and target worked 0 ./check_klog.sh 1002:1002:1002:1002::64 tcp 1025 ipport list +# Check that 1002:1002:1002:1002::64,tcp:1025 is in ipport set now +0 ipset test ipport 1002:1002:1002:1002::64,tcp:1025 +# Check that 1002:1002:1002:1002::64,udp:1025 is not in ipport set +1 ipset test ipport 1002:1002:1002:1002::64,udp:1025 # Send probe packet from 1002:1002:1002:1002::64,udp:1025 0 sendip -p ipv6 -6d ::1 -6s 1002:1002:1002:1002::64 -p udp -ud 80 -us 1025 ::1 # Check that proper sets matched and target worked 0 ./check_klog.sh 1002:1002:1002:1002::64 udp 1025 ipport list +# Check that 1002:1002:1002:1002::64,udp:1025 is in ipport set now +0 ipset test ipport 1002:1002:1002:1002::64,udp:1025 +# Check that 1002:1002:1002:1002::1,tcp:1025 is not in ipport set +1 ipset test ipport 1002:1002:1002:1002::1,tcp:1025 # Send probe packet from 1002:1002:1002:1002::1,tcp:1025 0 sendip -p ipv6 -6d ::1 -6s 1002:1002:1002:1002::1 -p tcp -td 80 -ts 1025 ::1 # Check that proper sets matched and target worked 0 ./check_klog.sh 1002:1002:1002:1002::1 tcp 1025 ip1 list +# Check that 1002:1002:1002:1002::1,tcp:1025 is not in ipport set +1 ipset test ipport 1002:1002:1002:1002::1,tcp:1025 +# Check that 1002:1002:1002:1002::32,tcp:1025 is not in ipport set +1 ipset test ipport 1002:1002:1002:1002::32,tcp:1025 # Send probe packet from 1002:1002:1002:1002::32,tcp:1025 0 sendip -p ipv6 -6d ::1 -6s 1002:1002:1002:1002::32 -p tcp -td 80 -ts 1025 ::1 # Check that proper sets matched and target worked 0 ./check_klog.sh 1002:1002:1002:1002::32 tcp 1025 ip2 +# Check that 1002:1002:1002:1002::32,tcp:1025 is not in ipport set +1 ipset test ipport 1002:1002:1002:1002::32,tcp:1025 +# Check that 1002:1002:1002:1002::64,icmpv6:ttl-zero-during-reassembly is not in ipport set +1 ipset test ipport 1002:1002:1002:1002::64,icmpv6:ttl-zero-during-reassembly +# Send probe packet from 1002:1002:1002:1002::64,icmpv6:ttl-zero-during-reassembly +0 sendip -d r10 -p ipv6 -6d ::1 -6s 1002:1002:1002:1002::64 -p icmp -ct 3 -cd 1 ::1 +# Check that 1002:1002:1002:1002::64,icmpv6:ttl-zero-during-reassembly is in ipport set now +0 ipset test ipport 1002:1002:1002:1002::64,icmpv6:ttl-zero-during-reassembly # Destroy sets and rules 0 ./iptables.sh inet6 stop # eof -- cgit v1.2.3