diff options
author | Florian Westphal <fw@strlen.de> | 2017-06-16 21:26:41 +0200 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2017-06-18 23:28:57 +0200 |
commit | 7e1ff143442c6c9428f2a1cdb7c751216407437c (patch) | |
tree | 7a09bf2ddfd03e5a88749c0090f0462c05c852b1 /tests/py | |
parent | 2827cced68cf6ad75ae6ed88ee67695450118992 (diff) |
tests: restrict meta nfproto test cases to inet family
Followup patch will reject meta nfproto for non-inet families.
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/py')
-rw-r--r-- | tests/py/any/meta.t | 5 | ||||
-rw-r--r-- | tests/py/any/meta.t.payload | 26 | ||||
-rw-r--r-- | tests/py/inet/meta.t | 10 | ||||
-rw-r--r-- | tests/py/inet/meta.t.payload | 25 |
4 files changed, 35 insertions, 31 deletions
diff --git a/tests/py/any/meta.t b/tests/py/any/meta.t index fc041bf5..dd335ab8 100644 --- a/tests/py/any/meta.t +++ b/tests/py/any/meta.t @@ -25,11 +25,6 @@ meta protocol != {ip, arp, ip6, vlan};ok meta protocol ip;ok meta protocol != ip;ok -meta nfproto ipv4;ok -meta nfproto ipv6;ok -meta nfproto {ipv4, ipv6};ok -meta nfproto != {ipv4, ipv6};ok - meta l4proto 22;ok meta l4proto != 233;ok meta l4proto 33-45;ok diff --git a/tests/py/any/meta.t.payload b/tests/py/any/meta.t.payload index 871f1ada..b2065f3d 100644 --- a/tests/py/any/meta.t.payload +++ b/tests/py/any/meta.t.payload @@ -104,32 +104,6 @@ ip test-ip4 input [ meta load protocol => reg 1 ] [ cmp neq reg 1 0x00000008 ] -# meta nfproto ipv4 -ip test-ip4 input - [ meta load nfproto => reg 1 ] - [ cmp eq reg 1 0x00000002 ] - -# meta nfproto ipv6 -ip test-ip4 input - [ meta load nfproto => reg 1 ] - [ cmp eq reg 1 0x0000000a ] - -# meta nfproto {ipv4, ipv6} -__set%d test-ip4 3 -__set%d test-ip4 0 - element 00000002 : 0 [end] element 0000000a : 0 [end] -ip test-ip4 input - [ meta load nfproto => reg 1 ] - [ lookup reg 1 set __set%d ] - -# meta nfproto != {ipv4, ipv6} -__set%d test-ip4 3 -__set%d test-ip4 0 - element 00000002 : 0 [end] element 0000000a : 0 [end] -ip test-ip4 input - [ meta load nfproto => reg 1 ] - [ lookup reg 1 set __set%d 0x1 ] - # meta l4proto 22 ip test-ip4 input [ meta load l4proto => reg 1 ] diff --git a/tests/py/inet/meta.t b/tests/py/inet/meta.t new file mode 100644 index 00000000..723dd46c --- /dev/null +++ b/tests/py/inet/meta.t @@ -0,0 +1,10 @@ +:input;type filter hook input priority 0 +:ingress;type filter hook ingress device lo priority 0 + +*inet;test-inet;input + +meta nfproto ipv4;ok +meta nfproto ipv6;ok +meta nfproto {ipv4, ipv6};ok +meta nfproto != {ipv4, ipv6};ok + diff --git a/tests/py/inet/meta.t.payload b/tests/py/inet/meta.t.payload new file mode 100644 index 00000000..8b6759a1 --- /dev/null +++ b/tests/py/inet/meta.t.payload @@ -0,0 +1,25 @@ +# meta nfproto ipv4 +ip test-ip4 input + [ meta load nfproto => reg 1 ] + [ cmp eq reg 1 0x00000002 ] + +# meta nfproto ipv6 +ip test-ip4 input + [ meta load nfproto => reg 1 ] + [ cmp eq reg 1 0x0000000a ] + +# meta nfproto {ipv4, ipv6} +__set%d test-ip4 3 +__set%d test-ip4 0 + element 00000002 : 0 [end] element 0000000a : 0 [end] +ip test-ip4 input + [ meta load nfproto => reg 1 ] + [ lookup reg 1 set __set%d ] + +# meta nfproto != {ipv4, ipv6} +__set%d test-ip4 3 +__set%d test-ip4 0 + element 00000002 : 0 [end] element 0000000a : 0 [end] +ip test-ip4 input + [ meta load nfproto => reg 1 ] + [ lookup reg 1 set __set%d 0x1 ] |