summaryrefslogtreecommitdiffstats
path: root/tests/files/dictionary
diff options
context:
space:
mode:
authorArturo Borrero <arturo.borrero.glez@gmail.com>2015-12-11 11:10:14 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2015-12-15 21:36:14 +0100
commit6b29a5bebb957387fe1aac8fcbfd431e6be237f0 (patch)
tree7e0be595ee6acfbdd2611045a7d227d5f329a16e /tests/files/dictionary
parent564b0e7c13f98b9ad054058137b4c0bb61bd46b4 (diff)
tests/: rearrange tests directory
Rearrange the directory to obtain a better organization of files and tests-suites. We end with a tree like this: tests | .--- py .--- shell .--- files This was suggested by Pablo. Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/files/dictionary')
-rw-r--r--tests/files/dictionary52
1 files changed, 52 insertions, 0 deletions
diff --git a/tests/files/dictionary b/tests/files/dictionary
new file mode 100644
index 00000000..b4e6c521
--- /dev/null
+++ b/tests/files/dictionary
@@ -0,0 +1,52 @@
+#! nft -f
+#
+add table ip filter
+add chain ip filter output { type filter hook output priority 0 ; }
+
+add chain ip filter chain1
+add rule ip filter chain1 counter
+
+add chain ip filter chain2
+add rule ip filter chain2 counter
+
+# must succeed: expr { expr, ... }
+add rule ip filter OUTPUT tcp dport { \
+ 22, \
+ 23, \
+}
+
+# must fail: expr { type1, type2, ... }
+add rule ip filter OUTPUT tcp dport { \
+ 22, \
+ 192.168.0.1, \
+}
+
+# must succeed: expr { expr : verdict, ... }
+add rule ip filter OUTPUT tcp dport vmap { \
+ 22 : jump chain1, \
+ 23 : jump chain2, \
+}
+
+# must fail: expr { expr : verdict, expr : expr, ... }
+add rule ip filter OUTPUT tcp dport vmap { \
+ 22 : jump chain1, \
+ 23 : 0x100, \
+}
+
+# must fail: expr { expr : expr, ...}
+add rule ip filter OUTPUT tcp dport vmap { \
+ 22 : 0x100, \
+ 23 : 0x200, \
+}
+
+# must succeed: expr MAP { expr : expr, ... } expr
+add rule ip filter OUTPUT meta mark set tcp dport map { \
+ 22 : 1, \
+ 23 : 2, \
+}
+
+# must fail: expr MAP { expr : type1, expr : type2, .. } expr
+add rule ip filter OUTPUT meta mark set tcp dport map { \
+ 22 : 1, \
+ 23 : 192.168.0.1, \
+}