Révision f34dae00
Spec tests for default rules
spec/classes/filter_spec.rb | ||
---|---|---|
48 | 48 |
:content => /^}$/, |
49 | 49 |
:order => '99', |
50 | 50 |
)} |
51 |
it { is_expected.to contain_concat__fragment('nftables-filter-chain-rule-default_in-ssh').with( |
|
52 |
:target => 'nftables-chain-filter-default_in', |
|
53 |
:content => /^ tcp dport \{22\} accept$/, |
|
54 |
:order => '50', |
|
55 |
)} |
|
51 | 56 |
end |
52 | 57 |
|
53 | 58 |
context "chain forward" do |
... | ... | |
108 | 113 |
:content => /^}$/, |
109 | 114 |
:order => '99', |
110 | 115 |
)} |
116 |
it { is_expected.to contain_concat__fragment('nftables-filter-chain-rule-default_out-chrony').with( |
|
117 |
:target => 'nftables-chain-filter-default_out', |
|
118 |
:content => /^ udp dport 123 accept$/, |
|
119 |
:order => '50', |
|
120 |
)} |
|
121 |
it { is_expected.to contain_concat__fragment('nftables-filter-chain-rule-default_out-dnsudp').with( |
|
122 |
:target => 'nftables-chain-filter-default_out', |
|
123 |
:content => /^ udp dport 53 accept$/, |
|
124 |
:order => '50', |
|
125 |
)} |
|
126 |
it { is_expected.to contain_concat__fragment('nftables-filter-chain-rule-default_out-dnstcp').with( |
|
127 |
:target => 'nftables-chain-filter-default_out', |
|
128 |
:content => /^ tcp dport 53 accept$/, |
|
129 |
:order => '50', |
|
130 |
)} |
|
131 |
it { is_expected.to contain_concat__fragment('nftables-filter-chain-rule-default_out-http').with( |
|
132 |
:target => 'nftables-chain-filter-default_out', |
|
133 |
:content => /^ tcp dport 80 accept$/, |
|
134 |
:order => '50', |
|
135 |
)} |
|
136 |
it { is_expected.to contain_concat__fragment('nftables-filter-chain-rule-default_out-https').with( |
|
137 |
:target => 'nftables-chain-filter-default_out', |
|
138 |
:content => /^ tcp dport 443 accept$/, |
|
139 |
:order => '50', |
|
140 |
)} |
|
111 | 141 |
end |
112 | 142 |
end |
113 | 143 |
end |
Formats disponibles : Unified diff