diff options
| author | Phil Sutter <phil@nwl.cc> | 2023-09-28 18:19:37 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2023-09-28 22:13:04 +0200 |
| commit | 15a7d710dc892c0e68f118ca3e6106c84b30a83b (patch) | |
| tree | 2b797c413fb5c7e67e191a48003dc9f7eb81f00c | |
| parent | df4bb04a1b4754e98d87a378a3ceaad9989be21f (diff) | |
tests: shell: Fix for failing nft-f/sample-ruleset
For whatever reason, my system lacks an entry for 'sip' in
/etc/services. Assuming the service name is not relevant to the test,
just replace it by the respective port number.
Fixes: 68728014435d9 ("tests: shell: add sample ruleset reproducer")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Florian Westphal <fw@strlen.de>
| -rwxr-xr-x | tests/shell/testcases/nft-f/sample-ruleset | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/tests/shell/testcases/nft-f/sample-ruleset b/tests/shell/testcases/nft-f/sample-ruleset index 8cee74b9..763e41a1 100755 --- a/tests/shell/testcases/nft-f/sample-ruleset +++ b/tests/shell/testcases/nft-f/sample-ruleset @@ -175,7 +175,7 @@ table inet filter { log prefix "NFT REJECT FWD " flags ether flags ip options limit rate 5/second burst 10 packets reject } chain public_forward { - udp dport { sip, 7078-7097 } oifname $voip_if jump { + udp dport { 5060, 7078-7097 } oifname $voip_if jump { ip6 saddr $sip_whitelist_ip6 accept meta nfproto ipv6 log prefix "NFT DROP SIP " flags ether flags ip options limit rate 5/second burst 10 packets drop } @@ -199,7 +199,7 @@ table inet filter { icmpv6 type { destination-unreachable, packet-too-big, time-exceeded, parameter-problem, echo-request } oifname $public_if accept ip6 daddr $sip_whitelist_ip6 jump { - udp dport { 3478, sip } accept + udp dport { 3478, 5060 } accept udp sport { 7078-7097 } accept tcp dport 5061 accept } |