diff options
Diffstat (limited to 'tests/py/inet')
| -rw-r--r-- | tests/py/inet/reject.t | 3 | ||||
| -rw-r--r-- | tests/py/inet/reject.t.json | 42 | ||||
| -rw-r--r-- | tests/py/inet/reject.t.payload.inet | 12 |
3 files changed, 57 insertions, 0 deletions
diff --git a/tests/py/inet/reject.t b/tests/py/inet/reject.t index cb3caa4a..0e8966c9 100644 --- a/tests/py/inet/reject.t +++ b/tests/py/inet/reject.t @@ -34,3 +34,6 @@ meta nfproto ipv6 reject with icmp type host-unreachable;fail meta nfproto ipv4 ip protocol icmp reject with icmpv6 type no-route;fail meta nfproto ipv6 ip protocol icmp reject with icmp type host-unreachable;fail meta l4proto udp reject with tcp reset;fail + +meta nfproto ipv4 reject with icmpx type admin-prohibited;ok +meta nfproto ipv6 reject with icmpx type admin-prohibited;ok diff --git a/tests/py/inet/reject.t.json b/tests/py/inet/reject.t.json index 0939f445..46d4857a 100644 --- a/tests/py/inet/reject.t.json +++ b/tests/py/inet/reject.t.json @@ -238,3 +238,45 @@ } ] +# meta nfproto ipv4 reject with icmpx type admin-prohibited +[ + { + "match": { + "left": { + "meta": { + "key": "nfproto" + } + }, + "op": "==", + "right": "ipv4" + } + }, + { + "reject": { + "expr": "admin-prohibited", + "type": "icmpx" + } + } +] + +# meta nfproto ipv6 reject with icmpx type admin-prohibited +[ + { + "match": { + "left": { + "meta": { + "key": "nfproto" + } + }, + "op": "==", + "right": "ipv6" + } + }, + { + "reject": { + "expr": "admin-prohibited", + "type": "icmpx" + } + } +] + diff --git a/tests/py/inet/reject.t.payload.inet b/tests/py/inet/reject.t.payload.inet index 7a6468e8..ee1aae02 100644 --- a/tests/py/inet/reject.t.payload.inet +++ b/tests/py/inet/reject.t.payload.inet @@ -220,3 +220,15 @@ inet test-inet input [ cmp eq reg 1 0x0000000a ] [ reject type 0 code 0 ] +# meta nfproto ipv4 reject with icmpx type admin-prohibited +inet test-inet input + [ meta load nfproto => reg 1 ] + [ cmp eq reg 1 0x00000002 ] + [ reject type 2 code 3 ] + +# meta nfproto ipv6 reject with icmpx type admin-prohibited +inet test-inet input + [ meta load nfproto => reg 1 ] + [ cmp eq reg 1 0x0000000a ] + [ reject type 2 code 3 ] + |