blob: 12f10074409f673d519077f8b0b747aa112fa770 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
#!/bin/bash
set -e
drop_seconds() {
sed 's/m[0-9]*s[0-9]*ms/m/g'
}
RULESET="add table ip x
add set ip x y { type ipv4_addr; flags dynamic,timeout; }
add element ip x y { 1.1.1.1 timeout 30m expires 15m }"
test_output=$($NFT -e -f - <<< "$RULESET" 2>&1 | grep -v '# new generation' | drop_seconds)
if [ "$test_output" != "$RULESET" ] ; then
$DIFF -u <(echo "$test_output") <(echo "$RULESET")
exit 1
fi
$NFT "add chain ip x c; add rule ip x c ip saddr @y"
|
