diff options
| author | Phil Sutter <phil@nwl.cc> | 2022-02-04 18:45:22 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2022-02-10 16:42:53 +0100 |
| commit | 1407a9c45350839073842bcc8c84ce524db3a119 (patch) | |
| tree | 940ec058ca59e4652ae516f44ea609e2da5b62f2 /extensions/libxt_TCPMSS.t | |
| parent | fc8f7289a678d0a4d12383f21415ca8516352705 (diff) | |
tests: iptables-test: Support variant deviation
Some test results are not consistent between variants:
* CLUSTERIP is not supported with nft_compat, so all related tests fail
with iptables-nft.
* iptables-legacy mandates TCPMSS be combined with SYN flag match,
iptables-nft does not care. (Or precisely, xt_TCPMSS.ko can't validate
match presence.)
Introduce an optional fourth test spec field to specify the variant it
applies to. Consequently, the opposite result is expected with the other
variant.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions/libxt_TCPMSS.t')
| -rw-r--r-- | extensions/libxt_TCPMSS.t | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/extensions/libxt_TCPMSS.t b/extensions/libxt_TCPMSS.t index 553a3452..fbfbfcf8 100644 --- a/extensions/libxt_TCPMSS.t +++ b/extensions/libxt_TCPMSS.t @@ -1,6 +1,6 @@ :FORWARD,OUTPUT,POSTROUTING *mangle -j TCPMSS;;FAIL --p tcp -j TCPMSS --set-mss 42;;FAIL +-p tcp -j TCPMSS --set-mss 42;;FAIL;LEGACY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j TCPMSS --set-mss 42;=;OK -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j TCPMSS --clamp-mss-to-pmtu;=;OK |