#!/bin/bash

# This is the most basic testscase:
# * creating a valid interval set
# * referencing it from a valid rule

RULESET="
table inet t {
	set s1 {
		type ipv4_addr
		flags interval
		elements = { 10.0.0.0-11.0.0.0, 172.16.0.0/16 }
	}
	set s2 {
		type ipv6_addr
		flags interval
		elements = { fe00::/64, fe11::-fe22::}
	}
	set s3 {
		type inet_proto
		flags interval
		elements = { 10-20, 50-60}
	}
	set s4 {
		type inet_service
		flags interval
		elements = {8080-8082, 0-1024, 10000-40000}
	}
	chain c {
		ip saddr @s1 accept
		ip6 daddr @s2 accept
		ip protocol @s3 accept
		ip6 nexthdr @s3 accept
		tcp dport @s4 accept
	}
}"

set -e
$NFT -f - <<< "$RULESET"