summaryrefslogtreecommitdiffstats
path: root/tests/shell/testcases/include/dumps
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2023-02-06 15:28:41 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2023-02-07 11:38:49 +0100
commit27c753e4a8d4744f479345e3f5e34cafef751602 (patch)
tree13ac057d25e560e8b6220917290a9a39aea3594b /tests/shell/testcases/include/dumps
parent784597a4ed63b9decb10d74fdb49a1b021e22728 (diff)
rule: expand standalone chain that contains rules
Otherwise rules that this chain contains are ignored when expressed using the following syntax: chain inet filter input2 { type filter hook input priority filter; policy accept; ip saddr 1.2.3.4 tcp dport { 22, 443, 123 } drop } When expanding the chain, remove the rule so the new CMD_OBJ_CHAIN case does not expand it again. Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1655 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/shell/testcases/include/dumps')
-rw-r--r--tests/shell/testcases/include/dumps/0020include_chain_0.nft6
1 files changed, 6 insertions, 0 deletions
diff --git a/tests/shell/testcases/include/dumps/0020include_chain_0.nft b/tests/shell/testcases/include/dumps/0020include_chain_0.nft
new file mode 100644
index 00000000..3ad6db14
--- /dev/null
+++ b/tests/shell/testcases/include/dumps/0020include_chain_0.nft
@@ -0,0 +1,6 @@
+table inet filter {
+ chain input2 {
+ type filter hook input priority filter; policy accept;
+ ip saddr 1.2.3.4 tcp dport { 22, 123, 443 } drop
+ }
+}