summaryrefslogtreecommitdiffstats
path: root/tests/regression/ip/dnat.t
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2015-06-02 17:14:59 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2015-06-02 18:08:42 +0200
commit575cc4519aa177c573481f683e07c2789a2f870a (patch)
tree46909685c0940c50db60fa3a75fa753d4cbcb2aa /tests/regression/ip/dnat.t
parent99632dd169d7db6c66abc06df017de83feec2d38 (diff)
tests: regression: fix NAT tests
snat can be only used from prerouting and input, and dnat from output and postrouting. ip/nat.t: ERROR: line 12: nft add rule ip test-ip4 output iifname eth0 tcp sport 23-34 snat 192.168.3.2: This rule should not have failed. Split the test file as they require different chain configuration. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/regression/ip/dnat.t')
-rw-r--r--tests/regression/ip/dnat.t12
1 files changed, 12 insertions, 0 deletions
diff --git a/tests/regression/ip/dnat.t b/tests/regression/ip/dnat.t
new file mode 100644
index 00000000..78fc454d
--- /dev/null
+++ b/tests/regression/ip/dnat.t
@@ -0,0 +1,12 @@
+*ip;test-ip4
+:prerouting;type nat hook prerouting priority 0
+
+iifname "eth0" tcp dport 80-90 dnat 192.168.3.2;ok
+iifname "eth0" tcp dport != 80-90 dnat 192.168.3.2;ok
+iifname "eth0" tcp dport {80, 90, 23} dnat 192.168.3.2;ok
+- iifname "eth0" tcp dport != {80, 90, 23} dnat 192.168.3.2;ok
+- iifname "eth0" tcp dport != {80, 90, 23} dnat 192.168.3.2;ok
+# BUG: invalid expression type set
+# nft: src/evaluate.c:975: expr_evaluate_relational: Assertion '0' failed.
+
+iifname "eth0" tcp dport != 23-34 dnat 192.168.3.2;ok