diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-09-06 20:25:02 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-09-06 20:25:02 +0200 |
| commit | e0825b52df4a2a4ce6d137bb8adc553f6e71fc0b (patch) | |
| tree | 997c774d1d77276337d51a7e6431074bbcc28eb4 /smoketest/scripts/cli/test_firewall.py | |
| parent | e208d75edd79f5b8637276c27f23ee21fd423d06 (diff) | |
| parent | be3d2f9f6623396f2e9c6543f67d81161c7ad94b (diff) | |
| download | vyos-1x-e0825b52df4a2a4ce6d137bb8adc553f6e71fc0b.tar.gz vyos-1x-e0825b52df4a2a4ce6d137bb8adc553f6e71fc0b.zip | |
Merge pull request #2208 from sarthurdev/T5550
interface: T5550: Interface source-validation priority over global value
Diffstat (limited to 'smoketest/scripts/cli/test_firewall.py')
| -rwxr-xr-x | smoketest/scripts/cli/test_firewall.py | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/smoketest/scripts/cli/test_firewall.py b/smoketest/scripts/cli/test_firewall.py index ee6ccb710..6f9093f4d 100755 --- a/smoketest/scripts/cli/test_firewall.py +++ b/smoketest/scripts/cli/test_firewall.py @@ -529,23 +529,27 @@ class TestFirewall(VyOSUnitTestSHIM.TestCase): def test_source_validation(self): # Strict self.cli_set(['firewall', 'global-options', 'source-validation', 'strict']) + self.cli_set(['firewall', 'global-options', 'ipv6-source-validation', 'strict']) self.cli_commit() nftables_strict_search = [ ['fib saddr . iif oif 0', 'drop'] ] - self.verify_nftables(nftables_strict_search, 'inet vyos_global_rpfilter') + self.verify_nftables_chain(nftables_strict_search, 'ip raw', 'vyos_global_rpfilter') + self.verify_nftables_chain(nftables_strict_search, 'ip6 raw', 'vyos_global_rpfilter') # Loose self.cli_set(['firewall', 'global-options', 'source-validation', 'loose']) + self.cli_set(['firewall', 'global-options', 'ipv6-source-validation', 'loose']) self.cli_commit() nftables_loose_search = [ ['fib saddr oif 0', 'drop'] ] - self.verify_nftables(nftables_loose_search, 'inet vyos_global_rpfilter') + self.verify_nftables_chain(nftables_loose_search, 'ip raw', 'vyos_global_rpfilter') + self.verify_nftables_chain(nftables_loose_search, 'ip6 raw', 'vyos_global_rpfilter') def test_sysfs(self): for name, conf in sysfs_config.items(): |