From 49d4fe2170b866b3995e764f8b9c4d65ec2b7898 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 21 Jul 2020 15:00:24 +0200 Subject: src: allow for negative value in variable definitions Extend test to cover for negative value in chain priority definition. Signed-off-by: Pablo Neira Ayuso --- tests/shell/testcases/chains/0032priority_variable_0 | 10 ++++++++++ .../testcases/chains/dumps/0032priority_variable_0.nft | 13 +++++++++++++ 2 files changed, 23 insertions(+) create mode 100644 tests/shell/testcases/chains/dumps/0032priority_variable_0.nft (limited to 'tests/shell/testcases') diff --git a/tests/shell/testcases/chains/0032priority_variable_0 b/tests/shell/testcases/chains/0032priority_variable_0 index 51bc5eb1..8f2e57b9 100755 --- a/tests/shell/testcases/chains/0032priority_variable_0 +++ b/tests/shell/testcases/chains/0032priority_variable_0 @@ -6,12 +6,22 @@ set -e RULESET=" define pri = 10 +define post = -10 +define for = \"filter - 100\" table inet global { chain prerouting { type filter hook prerouting priority \$pri policy accept } + chain forward { + type filter hook prerouting priority \$for + policy accept + } + chain postrouting { + type filter hook postrouting priority \$post + policy accept + } }" $NFT -f - <<< "$RULESET" diff --git a/tests/shell/testcases/chains/dumps/0032priority_variable_0.nft b/tests/shell/testcases/chains/dumps/0032priority_variable_0.nft new file mode 100644 index 00000000..1a1b0794 --- /dev/null +++ b/tests/shell/testcases/chains/dumps/0032priority_variable_0.nft @@ -0,0 +1,13 @@ +table inet global { + chain prerouting { + type filter hook prerouting priority filter + 10; policy accept; + } + + chain forward { + type filter hook prerouting priority dstnat; policy accept; + } + + chain postrouting { + type filter hook postrouting priority filter - 10; policy accept; + } +} -- cgit v1.2.3