Révision 3a469f2b
Implement nftables::simplerule::saddr
spec/defines/simplerule_spec.rb | ||
---|---|---|
51 | 51 |
proto: 'udp', |
52 | 52 |
chain: 'default_out', |
53 | 53 |
daddr: '2001:1458::/32', |
54 |
saddr: '2001:145c::/32', |
|
54 | 55 |
} |
55 | 56 |
end |
56 | 57 |
|
57 | 58 |
it { is_expected.to compile } |
58 | 59 |
it { |
59 | 60 |
is_expected.to contain_nftables__rule('default_out-my_big_rule').with( |
60 |
content: 'udp sport {444} udp dport {333} ip6 daddr 2001:1458::/32 counter accept comment "this is my rule"', |
|
61 |
content: 'udp sport {444} udp dport {333} ip6 saddr 2001:145c::/32 ip6 daddr 2001:1458::/32 counter accept comment "this is my rule"',
|
|
61 | 62 |
order: '50', |
62 | 63 |
) |
63 | 64 |
} |
... | ... | |
177 | 178 |
} |
178 | 179 |
end |
179 | 180 |
|
181 |
describe 'with an IPv6 address as saddr' do |
|
182 |
let(:params) do |
|
183 |
{ |
|
184 |
saddr: '2001:1458:0000:0000:0000:0000:0000:0003', |
|
185 |
} |
|
186 |
end |
|
187 |
|
|
188 |
it { is_expected.to compile } |
|
189 |
it { |
|
190 |
is_expected.to contain_nftables__rule('default_in-my_default_rule_name').with( |
|
191 |
content: 'ip6 saddr 2001:1458:0000:0000:0000:0000:0000:0003 accept', |
|
192 |
) |
|
193 |
} |
|
194 |
end |
|
195 |
|
|
180 | 196 |
describe 'with an IPv6 set as daddr, default set_type' do |
181 | 197 |
let(:params) do |
182 | 198 |
{ |
... | ... | |
208 | 224 |
} |
209 | 225 |
end |
210 | 226 |
|
227 |
describe 'with a IPv6 set as saddr' do |
|
228 |
let(:params) do |
|
229 |
{ |
|
230 |
saddr: '@my6_set', |
|
231 |
set_type: 'ip6', |
|
232 |
} |
|
233 |
end |
|
234 |
|
|
235 |
it { is_expected.to compile } |
|
236 |
it { |
|
237 |
is_expected.to contain_nftables__rule('default_in-my_default_rule_name').with( |
|
238 |
content: 'ip6 saddr @my6_set accept', |
|
239 |
) |
|
240 |
} |
|
241 |
end |
|
242 |
|
|
211 | 243 |
describe 'with counter enabled' do |
212 | 244 |
let(:params) do |
213 | 245 |
{ |
Formats disponibles : Unified diff