diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-11-02 11:31:40 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-11-03 12:48:19 +0100 |
| commit | 8f3048954d40da8240cf5ff07b84d5c2e66f9066 (patch) | |
| tree | b2d6974ae9575575e2ea4450847b7c0abd03acb6 /tests/py/ip/snat.t.payload | |
| parent | dd0e717827d8dff3b762a8ebbf15bf57aa4012cb (diff) | |
evaluate: postpone transport protocol match check after nat expression evaluation
Fix bogus error report when using transport protocol as map key.
Fixes: 50780456a01a ("evaluate: check for missing transport protocol match in nat map with concatenations")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/py/ip/snat.t.payload')
| -rw-r--r-- | tests/py/ip/snat.t.payload | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/tests/py/ip/snat.t.payload b/tests/py/ip/snat.t.payload index 48ae46b3..71a5e2f1 100644 --- a/tests/py/ip/snat.t.payload +++ b/tests/py/ip/snat.t.payload @@ -139,3 +139,16 @@ ip [ lookup reg 1 set __map%d dreg 1 ] [ nat snat ip addr_min reg 1 proto_min reg 9 ] +# ip daddr 192.168.0.1 dnat to tcp dport map { 443 : 10.141.10.4 . 8443, 80 : 10.141.10.4 . 8080 } +__map%d x b size 2 +__map%d x 0 + element 0000bb01 : 040a8d0a 0000fb20 0 [end] element 00005000 : 040a8d0a 0000901f 0 [end] +ip + [ payload load 4b @ network header + 16 => reg 1 ] + [ cmp eq reg 1 0x0100a8c0 ] + [ meta load l4proto => reg 1 ] + [ cmp eq reg 1 0x00000006 ] + [ payload load 2b @ transport header + 2 => reg 1 ] + [ lookup reg 1 set __map%d dreg 1 ] + [ nat dnat ip addr_min reg 1 proto_min reg 9 ] + |