diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-04-03 23:40:04 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-04-04 13:19:33 +0200 |
| commit | 3edb96200690b804ceb76a9fb0ae441ed7d4d8f0 (patch) | |
| tree | 76580b8f2fe88638ba8231d50e453da88511034d /tests/py/ip | |
| parent | 3b29acc8f29944c5cf34259f2e2b5b40b4d0ccdd (diff) | |
parser_bison: missing tproxy syntax with port only for inet family
# nft add rule inet filter divert ip daddr 0.0.0.0/0 meta l4proto tcp tproxy ip to :2000
Error: syntax error, unexpected colon
add rule inet filter divert ip daddr 0.0.0.0/0 meta l4proto tcp tproxy ip to :2000
^
Syntax with no protocol for tproxy complains with:
# nft add rule inet filter divert ip daddr 0.0.0.0/0 meta l4proto tcp tproxy to :2000
Error: Conflicting network layer protocols.
add rule inet filter divert ip daddr 0.0.0.0/0 meta l4proto tcp tproxy to :2000
^^^^^^^^^^^^^^^
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1310
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/py/ip')
| -rw-r--r-- | tests/py/ip/tproxy.t | 2 | ||||
| -rw-r--r-- | tests/py/ip/tproxy.t.payload | 8 |
2 files changed, 9 insertions, 1 deletions
diff --git a/tests/py/ip/tproxy.t b/tests/py/ip/tproxy.t index dbd8f5e9..966898c0 100644 --- a/tests/py/ip/tproxy.t +++ b/tests/py/ip/tproxy.t @@ -11,4 +11,4 @@ meta l4proto 6 tproxy to 192.0.2.1:50080;ok ip protocol 6 tproxy to :50080;ok meta l4proto 17 tproxy ip to 192.0.2.1;ok;meta l4proto 17 tproxy to 192.0.2.1 meta l4proto 6 tproxy ip to 192.0.2.1:50080;ok;meta l4proto 6 tproxy to 192.0.2.1:50080 -ip protocol 6 tproxy ip to :50080;fail +ip protocol 6 tproxy ip to :50080;ok diff --git a/tests/py/ip/tproxy.t.payload b/tests/py/ip/tproxy.t.payload index 035651f4..dfe830ec 100644 --- a/tests/py/ip/tproxy.t.payload +++ b/tests/py/ip/tproxy.t.payload @@ -34,3 +34,11 @@ ip x y [ immediate reg 1 0x010200c0 ] [ immediate reg 2 0x0000a0c3 ] [ tproxy ip addr reg 1 port reg 2 ] + +# ip protocol 6 tproxy ip to :50080 +ip x y + [ payload load 1b @ network header + 9 => reg 1 ] + [ cmp eq reg 1 0x00000006 ] + [ immediate reg 1 0x0000a0c3 ] + [ tproxy ip port reg 1 ] + |