summaryrefslogtreecommitdiffstats
path: root/tests/shell/testcases/sets/dumps/0067nat_interval_0.nft
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2023-11-07 11:41:19 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2023-11-11 10:05:26 +0100
commitb95bbe966bd2431fee7b19aa0902aba10f9be696 (patch)
treec7c187a777cce68595e26000a8bff76a68659a1d /tests/shell/testcases/sets/dumps/0067nat_interval_0.nft
parenta3b6a92de6fa05802e90a70be0a287a90fb1a657 (diff)
tests: shell: split set NAT interval test
Split test in two, one for interval sets and another with concatenation + intervals, so at least intervals are tested in older kernels with no pipapo support. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/shell/testcases/sets/dumps/0067nat_interval_0.nft')
-rw-r--r--tests/shell/testcases/sets/dumps/0067nat_interval_0.nft12
1 files changed, 12 insertions, 0 deletions
diff --git a/tests/shell/testcases/sets/dumps/0067nat_interval_0.nft b/tests/shell/testcases/sets/dumps/0067nat_interval_0.nft
new file mode 100644
index 00000000..b6d07fcd
--- /dev/null
+++ b/tests/shell/testcases/sets/dumps/0067nat_interval_0.nft
@@ -0,0 +1,12 @@
+table ip nat {
+ map ipportmap {
+ type ipv4_addr : interval ipv4_addr . inet_service
+ flags interval
+ elements = { 192.168.1.2 : 10.141.10.1-10.141.10.3 . 8888-8999, 192.168.2.0/24 : 10.141.11.5-10.141.11.20 . 8888-8999 }
+ }
+
+ chain prerouting {
+ type nat hook prerouting priority dstnat; policy accept;
+ ip protocol tcp dnat ip to ip saddr map @ipportmap
+ }
+}