mirror of
https://git.netfilter.org/nftables
synced 2026-01-30 12:24:09 +00:00
5d78eaee0a
Fixes: 6847a7ce0fc9 ("tests: shell: cover netns removal for netdev and inet/ingress basechains")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
35 lines
616 B
Bash
Executable File
35 lines
616 B
Bash
Executable File
#!/bin/bash
|
|
|
|
# NFT_TEST_REQUIRES(NFT_TEST_HAVE_inet_ingress)
|
|
|
|
set -e
|
|
|
|
iface_cleanup() {
|
|
ip link del d0 &>/dev/null || :
|
|
}
|
|
trap 'iface_cleanup' EXIT
|
|
|
|
ip link add d0 type dummy
|
|
|
|
load_ruleset() {
|
|
family=$1
|
|
|
|
# Test auto-removal of chain hook on device removal
|
|
RULESET="table $family x {
|
|
chain x {}
|
|
chain w {
|
|
ip daddr 8.7.6.0/24 jump x
|
|
}
|
|
chain y {
|
|
type filter hook ingress device \"d0\" priority 0;
|
|
ip saddr { 1.2.3.4, 2.3.4.5 } counter
|
|
ip daddr vmap { 5.4.3.0/24 : jump w, 8.9.0.0/24 : jump x }
|
|
}
|
|
}"
|
|
$NFT -c -f - <<< $RULESET
|
|
$NFT -f - <<< $RULESET
|
|
}
|
|
|
|
load_ruleset "inet"
|
|
load_ruleset "netdev"
|