tests/shell/testcases/maps/vmap_unary


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

#!/bin/bash

set -e

RULESET="table ip filter {
	map ipsec_in {
		typeof ipsec in reqid . iif : verdict
		flags interval
	}

	chain INPUT {
		type filter hook input priority 0; policy drop
		ipsec in reqid . iif vmap @ipsec_in
	}
}"

$NFT -f - <<< $RULESET