diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2025-11-28 15:43:07 +0100 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2026-06-04 16:18:29 +0200 |
| commit | dffcc04dc143202b412a96ba60867d8509c57e1c (patch) | |
| tree | cbff28ab76967fe436e9b0632fdd0b11b2e3cda3 /smoketest/scripts/cli/test_firewall.py | |
| parent | 88dfc8cd43521ae489900fb9746c56545140df54 (diff) | |
| download | vyos-1x-dffcc04dc143202b412a96ba60867d8509c57e1c.tar.gz vyos-1x-dffcc04dc143202b412a96ba60867d8509c57e1c.zip | |
geoip: T5746: Add GeoIP ASN support
Diffstat (limited to 'smoketest/scripts/cli/test_firewall.py')
| -rwxr-xr-x | smoketest/scripts/cli/test_firewall.py | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/smoketest/scripts/cli/test_firewall.py b/smoketest/scripts/cli/test_firewall.py index 224c29a5e..baafc9d6e 100755 --- a/smoketest/scripts/cli/test_firewall.py +++ b/smoketest/scripts/cli/test_firewall.py @@ -93,12 +93,19 @@ class TestFirewall(VyOSUnitTestSHIM.TestCase): self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '2', 'source', 'geoip', 'country-code', 'de']) self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '2', 'source', 'geoip', 'country-code', 'fr']) self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '2', 'source', 'geoip', 'inverse-match']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '3', 'action', 'drop']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '3', 'source', 'geoip', 'asn', '13335']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '4', 'action', 'accept']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '4', 'source', 'geoip', 'asn', '15169']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '4', 'source', 'geoip', 'inverse-match']) self.cli_commit() nftables_search = [ ['ip saddr @GEOIP_CC_name_smoketest_1', 'drop'], - ['ip saddr != @GEOIP_CC_name_smoketest_2', 'accept'] + ['ip saddr != @GEOIP_CC_name_smoketest_2', 'accept'], + ['ip saddr @GEOIP_ASN_name_smoketest_3', 'drop'], + ['ip saddr != @GEOIP_ASN_name_smoketest_4', 'accept'] ] # -t prevents 1000+ GeoIP elements being returned |