diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-10-22 17:30:42 +0200 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2024-11-05 18:10:24 +0100 |
| commit | 29d78e196c771a8cc0788397a504b1b8c9e40e6e (patch) | |
| tree | 4271cde5e523bddbb8e6dab28a0c77fa1599b86a /extensions/libipt_iprange.t | |
| parent | d6068deba5a51f906abea6c99dc7d2d07d0d4901 (diff) | |
tests: iptables-test: extend coverage for ip6tables
Update iptables-test.py to run libxt_*.t both for iptables and
ip6tables. For libxt_*.t tests, append the command name to status output
line. This update requires changes in the existing tests.
* Rename libxt_*.t into libipt_*.t and add libip6_*.t variant.
- TEE
- TPROXY
- connlimit
- conntrack
- iprange
- ipvs
- policy
- recent
* Rename the following libxt_*.t to libipt_*.t since they are IPv4
specific:
- standard
- osf
* Remove IPv4 specific test in libxt_mark.t
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions/libipt_iprange.t')
| -rw-r--r-- | extensions/libipt_iprange.t | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/extensions/libipt_iprange.t b/extensions/libipt_iprange.t new file mode 100644 index 00000000..8b443417 --- /dev/null +++ b/extensions/libipt_iprange.t @@ -0,0 +1,10 @@ +:INPUT,FORWARD,OUTPUT +-m iprange --src-range 1.1.1.1-1.1.1.10;=;OK +-m iprange ! --src-range 1.1.1.1-1.1.1.10;=;OK +-m iprange --dst-range 1.1.1.1-1.1.1.10;=;OK +-m iprange ! --dst-range 1.1.1.1-1.1.1.10;=;OK +# it shows -A INPUT -m iprange --src-range 1.1.1.1-1.1.1.1, should we support this? +# ERROR: should fail: iptables -A INPUT -m iprange --src-range 1.1.1.1 +# -m iprange --src-range 1.1.1.1;;FAIL +# ERROR: should fail: iptables -A INPUT -m iprange --dst-range 1.1.1.1 +#-m iprange --dst-range 1.1.1.1;;FAIL |