From 15a7d710dc892c0e68f118ca3e6106c84b30a83b Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Thu, 28 Sep 2023 18:19:37 +0200 Subject: tests: shell: Fix for failing nft-f/sample-ruleset For whatever reason, my system lacks an entry for 'sip' in /etc/services. Assuming the service name is not relevant to the test, just replace it by the respective port number. Fixes: 68728014435d9 ("tests: shell: add sample ruleset reproducer") Signed-off-by: Phil Sutter Signed-off-by: Florian Westphal --- tests/shell/testcases/nft-f/sample-ruleset | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/shell/testcases/nft-f/sample-ruleset b/tests/shell/testcases/nft-f/sample-ruleset index 8cee74b9..763e41a1 100755 --- a/tests/shell/testcases/nft-f/sample-ruleset +++ b/tests/shell/testcases/nft-f/sample-ruleset @@ -175,7 +175,7 @@ table inet filter { log prefix "NFT REJECT FWD " flags ether flags ip options limit rate 5/second burst 10 packets reject } chain public_forward { - udp dport { sip, 7078-7097 } oifname $voip_if jump { + udp dport { 5060, 7078-7097 } oifname $voip_if jump { ip6 saddr $sip_whitelist_ip6 accept meta nfproto ipv6 log prefix "NFT DROP SIP " flags ether flags ip options limit rate 5/second burst 10 packets drop } @@ -199,7 +199,7 @@ table inet filter { icmpv6 type { destination-unreachable, packet-too-big, time-exceeded, parameter-problem, echo-request } oifname $public_if accept ip6 daddr $sip_whitelist_ip6 jump { - udp dport { 3478, sip } accept + udp dport { 3478, 5060 } accept udp sport { 7078-7097 } accept tcp dport 5061 accept } -- cgit v1.2.3