From 49d5b7277c7f212762d4ddfa321c733107c97043 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Thu, 13 Sep 2012 15:09:16 +0200 Subject: extensions: libipt_icmp: add unit test Signed-off-by: Pablo Neira Ayuso --- extensions/libipt_icmp.t | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 extensions/libipt_icmp.t (limited to 'extensions/libipt_icmp.t') diff --git a/extensions/libipt_icmp.t b/extensions/libipt_icmp.t new file mode 100644 index 00000000..f4ba65c2 --- /dev/null +++ b/extensions/libipt_icmp.t @@ -0,0 +1,15 @@ +:INPUT,FORWARD,OUTPUT +-p icmp -m icmp --icmp-type any;=;OK +# output uses the number, better use the name? +# ERROR: cannot find: iptables -I INPUT -p icmp -m icmp --icmp-type echo-reply +# -p icmp -m icmp --icmp-type echo-reply;=;OK +# output uses the number, better use the name? +# ERROR: annot find: iptables -I INPUT -p icmp -m icmp --icmp-type destination-unreachable +# -p icmp -m icmp --icmp-type destination-unreachable;=;OK +# it does not acccept name/name, should we accept this? +# ERROR: cannot load: iptables -A INPUT -p icmp -m icmp --icmp-type destination-unreachable/network-unreachable +# -p icmp -m icmp --icmp-type destination-unreachable/network-unreachable;=;OK +-m icmp;;FAIL +# we accept "iptables -I INPUT -p tcp -m tcp", why not this below? +# ERROR: cannot load: iptables -A INPUT -p icmp -m icmp +# -p icmp -m icmp;=;OK -- cgit v1.2.3