#!/bin/bash

# NFT_TEST_REQUIRES(NFT_TEST_HAVE_synproxy)

# * creating valid named objects
# * referencing them from a valid rule

RULESET="
table inet x {
	synproxy https-synproxy {
		mss 1460
		wscale 7
		timestamp sack-perm
	}
	synproxy other-synproxy {
		mss 1460
		wscale 5
	}
	map test2 {
		type ipv4_addr : synproxy
		flags interval
		elements = { 192.168.1.0/24 : "https-synproxy", 192.168.2.0/24 : "other-synproxy" }
	}
	chain y {
		type filter hook input priority 0; policy accept;
		synproxy name ip saddr map { 192.168.1.0/24 : "https-synproxy", 192.168.2.0/24 : "other-synproxy" }
	}
}"

set -e
$NFT -f - <<< "$RULESET"