summaryrefslogtreecommitdiffstats
path: root/tests/shell/testcases/nft-f/0005rollback_map_0
blob: 90108e729d59b3c1ddbd4607cc4221883e8de95c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
#!/bin/bash

# test a kernel rollback operation
# fail reason: invalid map

GOOD_RULESET="table ip t {
	set t {
		type ipv4_addr
		elements = { 1.1.1.1 }
	}

	chain c {
		ct state new
		tcp dport { 22222 }
		ip saddr @t drop
		jump other
	}

	chain other {
	}
}"

BAD_RULESET="flush ruleset
table ip t2 {
	chain c2 {
		tcp dport map { 22222: jump other, 11111: jump invalid }
	}

	chain other {
	}
}"

$NFT -f - <<< $GOOD_RULESET
if [ $? -ne 0 ] ; then
	echo "E: unable to load good ruleset" >&2
	exit 1
fi

$NFT -f - <<< $BAD_RULESET 2>/dev/null
if [ $? -eq 0 ]	; then
	echo "E: bogus ruleset loaded?" >&2
	exit 1
fi