diff options
author | Harsha Sharma <harshasharmaiitr@gmail.com> | 2018-02-06 23:33:30 +0530 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-02-25 20:18:29 +0100 |
commit | ed928a8302aa7a531987ff8120950c44bfcab700 (patch) | |
tree | 99f8790577b8ed1a5bc01d151eeb31d5d75dd1ab /extensions/libxt_ipcomp.t | |
parent | 632ace7c2947dbb70f74ea263b86ff68de391622 (diff) |
extensions: add tests for comp match options
This patch adds test for ipcomp flow match specified by its SPI value
and move tests for ipcomp protocol to libxt_policy.t
Signed-off-by: Harsha Sharma <harshasharmaiitr@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libxt_ipcomp.t')
-rw-r--r-- | extensions/libxt_ipcomp.t | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/extensions/libxt_ipcomp.t b/extensions/libxt_ipcomp.t index ce111142..8546ba9c 100644 --- a/extensions/libxt_ipcomp.t +++ b/extensions/libxt_ipcomp.t @@ -1,5 +1,3 @@ -:INPUT,FORWARD --m policy --dir in --pol ipsec --proto ipcomp;=;OK --m policy --dir in --pol none --proto ipcomp;;FAIL --m policy --dir in --pol ipsec --strict --reqid 1 --spi 0x1 --proto ipcomp;=;OK --m policy --dir in --pol ipsec --strict --reqid 1 --spi 0x1 --proto ipcomp --mode tunnel --tunnel-dst 10.0.0.0/8 --tunnel-src 10.0.0.0/8 --next --reqid 2;=;OK +:INPUT,OUTPUT +-p ipcomp -m ipcomp --ipcompspi 18 -j DROP;=;OK +-p ipcomp -m ipcomp ! --ipcompspi 18 -j ACCEPT;=;OK |