From 399d11797bd2c2d5e8f793081cd81832fe872889 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Mon, 4 Jan 2016 20:53:52 +0100 Subject: tests: add ct tests for ip family Cannot check e.g. saddr for 192.168.0.1 for 'any' protocol, nft needs to expect arguments of a specific address type. So e.g. when using 'inet' we need to add a rule that makes the expected family explicit, e.g. 'meta nfproto ipv4'. Signed-off-by: Florian Westphal --- tests/py/ip/ct.t | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 tests/py/ip/ct.t (limited to 'tests/py/ip/ct.t') diff --git a/tests/py/ip/ct.t b/tests/py/ip/ct.t new file mode 100644 index 00000000..28ad7660 --- /dev/null +++ b/tests/py/ip/ct.t @@ -0,0 +1,23 @@ +*ip;test-ip4 + +:output;type filter hook output priority 0 + +ct saddr original 192.168.0.1;ok +ct saddr reply 192.168.0.1;ok +ct daddr original 192.168.0.1;ok +ct daddr reply 192.168.0.1;ok + +# same, but with a netmask +ct saddr original 192.168.1.0/24;ok +ct saddr reply 192.168.1.0/24;ok +ct daddr original 192.168.1.0/24;ok +ct daddr reply 192.168.1.0/24;ok + +ct l3proto original ipv4;ok +ct l3proto reply foobar;fail + +ct protocol original 6 ct proto-dst original 22;ok +ct protocol original 17 ct proto-src reply 53;ok + +# wrong address family +ct daddr reply dead::beef;fail -- cgit v1.2.3