blob: 2bfb527b8080fb6cc9536955812d5bb1400c0560 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
#!/bin/bash
RC=0
check() { # (elems, expected)
out=$($NFT get element ip t s "{ $1 }" 2>/dev/null)
out=$(grep "elements =" <<< "$out")
out="${out#* \{ }"
out="${out% \}}"
[[ "$out" == "$2" ]] && return
echo "ERROR: asked for '$1', expecting '$2' but got '$out'"
((RC++))
}
RULESET="add table ip t
add set ip t s { type inet_service; flags interval; }
add element ip t s { 10, 20-30, 40, 50-60 }
"
$NFT -f - <<< "$RULESET"
# simple cases, (non-)existing values and ranges
check 10 10
check 11 ""
check 20-30 20-30
check 15-18 ""
# multiple single elements, ranges smaller than present
check "10, 40" "10, 40"
check 21-29 20-30
# non-existing ranges matching elements
check 10-40 ""
check 10-25 ""
check 25-55 ""
exit $RC
|
