From 63cf8a565e5c9746ee5342594773277bc3c23e06 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Mon, 17 Sep 2012 18:57:55 +0200 Subject: extensions: libxt_CT: add unit test Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_CT.t | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 extensions/libxt_CT.t (limited to 'extensions/libxt_CT.t') diff --git a/extensions/libxt_CT.t b/extensions/libxt_CT.t new file mode 100644 index 00000000..3c28534e --- /dev/null +++ b/extensions/libxt_CT.t @@ -0,0 +1,20 @@ +:PREROUTING,OUTPUT +*raw +-j CT --notrack;=;OK +-j CT --ctevents new,related,destroy,reply,assured,protoinfo,helper,mark;=;OK +-j CT --expevents new;=;OK +# ERROR: cannot find: iptables -I PREROUTING -t raw -j CT --zone 0 +# -j CT --zone 0;=;OK +-j CT --zone 65535;=;OK +-j CT --zone 65536;;FAIL +-j CT --zone -1;;FAIL +# ERROR: should fail: iptables -A PREROUTING -t raw -j CT +# -j CT;;FAIL +@nfct timeout add test inet tcp ESTABLISHED 100 +# cannot load: iptables -A PREROUTING -t raw -j CT --timeout test +# -j CT --timeout test;=;OK +@nfct timeout del test +@nfct helper add rpc inet tcp +# cannot load: iptables -A PREROUTING -t raw -j CT --helper rpc +# -j CT --helper rpc;=;OK +@nfct helper del rpc -- cgit v1.2.3