blob: a9135c19ee54e9f510ab17d4f3cf682d14e8f5c8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
#!/bin/bash
RULESET="add table ip test
add set ip test foo { type ipv4_addr; }
add chain ip test tc
add element ip test foo { 1.2.3.4 }
add rule ip test tc ip saddr { 1.2.3.4, 5.6.7.8 } accept
delete table ip test
add element ip test foo { 1.2.3.6 }"
# kernel must return ENOENT
$NFT -f - <<< "$RULESET" 2>/dev/null || exit 0
echo "E: allowing element insertion on unexisting set"
exit 1
|
