diff options
| author | Phil Sutter <phil@nwl.cc> | 2020-03-07 03:00:10 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2020-03-10 16:28:58 +0100 |
| commit | 64b9aa3803dd1f6ca529a1f3bd7aa0875bdbd9d9 (patch) | |
| tree | c18dd45ac98e673bc17e6b33fe7549e1ebb565e3 /tests/py/inet/sets.t | |
| parent | 9475ca305a993751b05cf26ef8e785a00de98b94 (diff) | |
tests/py: Add tests involving concatenated ranges
Very basic testing, just a set definition, a rule which references it
and another one with an anonymous set.
Sadly this is already enough to expose some pending issues:
* Payload dependency killing ignores the concatenated IP header
expressions on LHS, so rule output is asymmetric.
* Anonymous sets don't accept concatenated ranges yet, so the second
rule is manually disabled for now.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'tests/py/inet/sets.t')
| -rw-r--r-- | tests/py/inet/sets.t | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/tests/py/inet/sets.t b/tests/py/inet/sets.t index daf8f2d6..e0b0ee86 100644 --- a/tests/py/inet/sets.t +++ b/tests/py/inet/sets.t @@ -16,3 +16,9 @@ ip saddr != @set2 drop;fail ip6 daddr != @set2 accept;ok ip6 daddr @set1 drop;fail + +!set3 type ipv4_addr . ipv4_addr . inet_service flags interval;ok +?set3 10.0.0.0/8 . 192.168.1.3-192.168.1.9 . 1024-65535;ok + +ip saddr . ip daddr . tcp dport @set3 accept;ok +-ip daddr . tcp dport { 10.0.0.0/8 . 10-23, 192.168.1.1-192.168.3.8 . 80-443 } accept;ok |