diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-11-06 20:04:05 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-11-11 09:46:27 +0100 |
| commit | aa6f521b427f0c5b2384f90599807ad35b400293 (patch) | |
| tree | 91b136b37274616aea393f356aa2302329dcee2c /tests | |
| parent | f24f9b11a1e9701d0e428e692c99be4624e20b23 (diff) | |
tests: shell: skip prerouting reject tests if kernel lacks support
Skip tests that require reject at prerouting hook.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/shell/features/prerouting_reject.nft | 8 | ||||
| -rwxr-xr-x | tests/shell/testcases/optimizations/ruleset | 2 |
2 files changed, 10 insertions, 0 deletions
diff --git a/tests/shell/features/prerouting_reject.nft b/tests/shell/features/prerouting_reject.nft new file mode 100644 index 00000000..3dcfb40e --- /dev/null +++ b/tests/shell/features/prerouting_reject.nft @@ -0,0 +1,8 @@ +# f53b9b0bdc59 netfilter: introduce support for reject at prerouting stage +# v5.9-rc1~133^2~302^2~11 +table inet t { + chain nat_filter { + type filter hook prerouting priority 0; policy accept; + reject with icmpx type host-unreachable + } +} diff --git a/tests/shell/testcases/optimizations/ruleset b/tests/shell/testcases/optimizations/ruleset index ef2652db..2b2d80ff 100755 --- a/tests/shell/testcases/optimizations/ruleset +++ b/tests/shell/testcases/optimizations/ruleset @@ -1,5 +1,7 @@ #!/bin/bash +# NFT_TEST_REQUIRES(NFT_TEST_HAVE_prerouting_reject) + RULESET="table inet uni { chain gtfo { reject with icmpx type host-unreachable |