From b4775dec9f80b74c522edec8ebb4af5092e0e82b Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 13 Oct 2020 12:35:47 +0200 Subject: src: ingress inet support Add support for inet ingress chains. table inet filter { chain ingress { type filter hook ingress device "veth0" priority filter; policy accept; } chain input { type filter hook input priority filter; policy accept; } chain forward { type filter hook forward priority filter; policy accept; } } Signed-off-by: Pablo Neira Ayuso --- tests/shell/testcases/chains/0043chain_ingress_0 | 18 ++++++++++++++++++ .../shell/testcases/chains/dumps/0043chain_ingress.nft | 11 +++++++++++ 2 files changed, 29 insertions(+) create mode 100755 tests/shell/testcases/chains/0043chain_ingress_0 create mode 100644 tests/shell/testcases/chains/dumps/0043chain_ingress.nft (limited to 'tests/shell/testcases/chains') diff --git a/tests/shell/testcases/chains/0043chain_ingress_0 b/tests/shell/testcases/chains/0043chain_ingress_0 new file mode 100755 index 00000000..86dc075d --- /dev/null +++ b/tests/shell/testcases/chains/0043chain_ingress_0 @@ -0,0 +1,18 @@ +#!/bin/bash + +set -e + +RULESET="table inet filter { + chain ingress { + type filter hook ingress device \"lo\" priority filter; policy accept; + } + chain input { + type filter hook input priority filter; policy accept; + } + chain forward { + type filter hook forward priority filter; policy accept; + } +}" + +$NFT -f - <<< "$RULESET" && exit 0 +exit 1 diff --git a/tests/shell/testcases/chains/dumps/0043chain_ingress.nft b/tests/shell/testcases/chains/dumps/0043chain_ingress.nft new file mode 100644 index 00000000..74670423 --- /dev/null +++ b/tests/shell/testcases/chains/dumps/0043chain_ingress.nft @@ -0,0 +1,11 @@ +table inet filter { + chain ingress { + type filter hook ingress device \"lo\" priority filter; policy accept; + } + chain input { + type filter hook input priority filter; policy accept; + } + chain forward { + type filter hook forward priority filter; policy accept; + } +} -- cgit v1.2.3