diff options
| author | David Vølker <davvol@davvol.dk> | 2025-06-30 08:28:40 +0200 |
|---|---|---|
| committer | David Vølker <davvol@davvol.dk> | 2025-06-30 08:28:40 +0200 |
| commit | e14461a58ba0dd18dff7f9e80da03350ebf1b404 (patch) | |
| tree | 182cbdc95a528f0e55a46b8ebef4866cc9902a16 /smoketest/scripts/cli/test_firewall.py | |
| parent | 862817a7207c5b5d17c67451bac602d296b88230 (diff) | |
| download | vyos-1x-e14461a58ba0dd18dff7f9e80da03350ebf1b404.tar.gz vyos-1x-e14461a58ba0dd18dff7f9e80da03350ebf1b404.zip | |
firewall: T7452: update rule generation for Zone-based firewall
Diffstat (limited to 'smoketest/scripts/cli/test_firewall.py')
| -rwxr-xr-x | smoketest/scripts/cli/test_firewall.py | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/smoketest/scripts/cli/test_firewall.py b/smoketest/scripts/cli/test_firewall.py index 455c704d0..2e8b4af10 100755 --- a/smoketest/scripts/cli/test_firewall.py +++ b/smoketest/scripts/cli/test_firewall.py @@ -401,9 +401,9 @@ class TestFirewall(VyOSUnitTestSHIM.TestCase): self.cli_commit() nftables_search = [ - [f'daddr & 0.0.255.255 == 0.0.1.2'], - [f'saddr & 0.0.255.255 != 0.0.3.4'], - [f'saddr & 0.0.255.255 == @A_mask_group'] + ['daddr & 0.0.255.255 == 0.0.1.2'], + ['saddr & 0.0.255.255 != 0.0.3.4'], + ['saddr & 0.0.255.255 == @A_mask_group'] ] self.verify_nftables(nftables_search, 'ip vyos_filter') @@ -1021,9 +1021,9 @@ class TestFirewall(VyOSUnitTestSHIM.TestCase): ['chain VYOS_ZONE_FORWARD'], ['type filter hook forward priority filter + 1'], ['oifname { "eth1", "eth2" }', 'counter packets', 'jump VZONE_ZONE1'], - ['oifname "eth0"', 'counter packets', 'jump VZONE_ZONE1'], + ['oifname "VRF-1"', 'counter packets', 'jump VZONE_ZONE1'], ['oifname "vtun66"', 'counter packets', 'jump VZONE_ZONE2'], - ['oifname "vti1"', 'counter packets', 'jump VZONE_ZONE2'], + ['oifname "VRF-2"', 'counter packets', 'jump VZONE_ZONE2'], ['chain VYOS_ZONE_LOCAL'], ['type filter hook input priority filter + 1'], ['counter packets', 'jump VZONE_LOCAL_IN'], @@ -1056,9 +1056,9 @@ class TestFirewall(VyOSUnitTestSHIM.TestCase): ['chain VYOS_ZONE_FORWARD'], ['type filter hook forward priority filter + 1'], ['oifname { "eth1", "eth2" }', 'counter packets', 'jump VZONE_ZONE1'], - ['oifname "eth0"', 'counter packets', 'jump VZONE_ZONE1'], + ['oifname "VRF-1"', 'counter packets', 'jump VZONE_ZONE1'], ['oifname "vtun66"', 'counter packets', 'jump VZONE_ZONE2'], - ['oifname "vti1"', 'counter packets', 'jump VZONE_ZONE2'], + ['oifname "VRF-2"', 'counter packets', 'jump VZONE_ZONE2'], ['chain VYOS_ZONE_LOCAL'], ['type filter hook input priority filter + 1'], ['counter packets', 'jump VZONE_LOCAL_IN'], @@ -1069,7 +1069,7 @@ class TestFirewall(VyOSUnitTestSHIM.TestCase): ['counter packets', 'drop', 'comment "zone_LOCAL default-action drop"'], ['chain VZONE_LOCAL_OUT'], ['oifname "vtun66"', 'counter packets', 'jump NAME6_LOCAL_to_ZONE2_v6'], - ['oifname "vti1"', 'counter packets', 'jump NAME6_LOCAL_to_ZONE2_v6'], + ['oifname "VRF-2"', 'counter packets', 'jump NAME6_LOCAL_to_ZONE2_v6'], ['counter packets', 'drop', 'comment "zone_LOCAL default-action drop"'], ['chain VZONE_ZONE1'], ['iifname { "eth1", "eth2" }', 'counter packets', 'return'], |