From 1ecef0bbc318bab9f8dac4498acacb210b0915fc Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 15 Sep 2015 17:14:58 +0200 Subject: extensions: fix several test errors extensions/libxt_esp.t: ERROR: line 7 (should fail: iptables -A INPUT -p esp -m esp) extensions/libip6t_rt.t: ERROR: line 5 (should fail: ip6tables -A INPUT -m rt) extensions/libip6t_ah.t: ERROR: line 15 (should fail: ip6tables -A INPUT -m ah) extensions/libipt_ah.t: ERROR: line 13 (should fail: iptables -A INPUT -p ah -m ah) Fixes: 4264de1f270a ("extensions: restore matching any SPI id by default") Signed-off-by: Pablo Neira Ayuso --- extensions/libip6t_ah.t | 2 +- extensions/libip6t_rt.t | 2 +- extensions/libipt_ah.t | 2 +- extensions/libxt_esp.t | 2 -- 4 files changed, 3 insertions(+), 5 deletions(-) diff --git a/extensions/libip6t_ah.t b/extensions/libip6t_ah.t index 36ca7dfb..c1898d44 100644 --- a/extensions/libip6t_ah.t +++ b/extensions/libip6t_ah.t @@ -12,4 +12,4 @@ -m ah --ahspi invalid;;FAIL -m ah --ahspi 0:invalid;;FAIL -m ah --ahspi;;FAIL --m ah;-m ah --ahspi 0;FAIL +-m ah;=;OK diff --git a/extensions/libip6t_rt.t b/extensions/libip6t_rt.t index 553123e3..3c7b2d98 100644 --- a/extensions/libip6t_rt.t +++ b/extensions/libip6t_rt.t @@ -2,4 +2,4 @@ -m rt --rt-type 0 --rt-segsleft 1:23 --rt-len 42 --rt-0-res;=;OK -m rt --rt-type 0 ! --rt-segsleft 1:23 ! --rt-len 42 --rt-0-res;=;OK -m rt ! --rt-type 1 ! --rt-segsleft 12:23 ! --rt-len 42;=;OK --m rt;-m rt --rtsegsleft 0;FAIL +-m rt;=;OK diff --git a/extensions/libipt_ah.t b/extensions/libipt_ah.t index 2993906a..cd853865 100644 --- a/extensions/libipt_ah.t +++ b/extensions/libipt_ah.t @@ -10,4 +10,4 @@ -m ah --ahspi 0;;FAIL -m ah --ahspi;;FAIL -m ah;;FAIL --p ah -m ah;-p ah -m ah --ahspi 0;FAIL +-p ah -m ah;=;OK diff --git a/extensions/libxt_esp.t b/extensions/libxt_esp.t index f207defc..92c5779f 100644 --- a/extensions/libxt_esp.t +++ b/extensions/libxt_esp.t @@ -4,7 +4,5 @@ -p esp -m esp --espspi 0:4294967295;-p esp -m esp;OK -p esp -m esp ! --espspi 0:4294967294;=;OK -p esp -m esp --espspi -1;;FAIL --p esp -m esp;-p esp -m esp --espspi 0;FAIL -# should fail? -p esp -m esp;=;OK -m esp;;FAIL -- cgit v1.2.3