From 5a52e6a9cffd8e2a5d16af0fa08902ca8332190b Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Mon, 5 Nov 2018 18:58:42 +0100 Subject: extensions: test protocol and interface negation Signed-off-by: Florian Westphal --- extensions/iptables.t | 2 ++ extensions/libxt_standard.t | 3 +++ 2 files changed, 5 insertions(+) (limited to 'extensions') diff --git a/extensions/iptables.t b/extensions/iptables.t index 65456ee9..b4b6d677 100644 --- a/extensions/iptables.t +++ b/extensions/iptables.t @@ -2,3 +2,5 @@ -i alongifacename0;=;OK -i thisinterfaceistoolong0;;FAIL -i eth+ -o alongifacename+;=;OK +! -i eth0;=;OK +! -o eth+;=;OK diff --git a/extensions/libxt_standard.t b/extensions/libxt_standard.t index bfdedb7a..4313f7b7 100644 --- a/extensions/libxt_standard.t +++ b/extensions/libxt_standard.t @@ -3,6 +3,9 @@ ! -s 0.0.0.0 -j ACCEPT;! -s 0.0.0.0/32 -j ACCEPT;OK ! -d 0.0.0.0/32 -j ACCEPT;=;OK -s 0.0.0.0/24 -j RETURN;=;OK +-p tcp -j ACCEPT;=;OK +! -p udp -j ACCEPT;=;OK -j DROP;=;OK -j ACCEPT;=;OK -j RETURN;=;OK +! -p 0 -j ACCEPT;=;FAIL -- cgit v1.2.3