From 16db2440ae5a5d34590b883eea63a238178d6133 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Mon, 24 Feb 2020 01:03:19 +0100 Subject: tests: add initial nat map test Will be extended to cover upcoming 'dnat to ip saddr . tcp dport map { \ 1.2.3.4 . 80 : 5.6.7.8 : 8080, 2.2.3.4 . 80 : 7.6.7.8 : 1234, ... Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso --- tests/shell/testcases/maps/dumps/nat_addr_port.nft | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 tests/shell/testcases/maps/dumps/nat_addr_port.nft (limited to 'tests/shell/testcases/maps/dumps') diff --git a/tests/shell/testcases/maps/dumps/nat_addr_port.nft b/tests/shell/testcases/maps/dumps/nat_addr_port.nft new file mode 100644 index 00000000..3ed6812e --- /dev/null +++ b/tests/shell/testcases/maps/dumps/nat_addr_port.nft @@ -0,0 +1,13 @@ +table ip ipfoo { + map x { + type ipv4_addr : ipv4_addr + } + + chain c { + type nat hook prerouting priority dstnat; policy accept; + iifname != "foobar" accept + dnat to ip daddr map @x + ip saddr 10.1.1.1 dnat to 10.2.3.4 + ip saddr 10.1.1.2 tcp dport 42 dnat to 10.2.3.4:4242 + } +} -- cgit v1.2.3