diff options
| author | Daniil Baturin <daniil@vyos.io> | 2026-04-21 14:19:46 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-04-21 14:19:46 +0100 |
| commit | 9c8029128d2672f8dd388b31ac831d0497ce8595 (patch) | |
| tree | 3c35583e15b487f97e074a532f916a4cca9389ca /smoketest/scripts/cli | |
| parent | 6cac8010f840ad5b8053cf6155bfb12a6720bf6f (diff) | |
| parent | 5d51856e5d350ba8d855c047cbc942fcf48b575c (diff) | |
| download | vyos-1x-9c8029128d2672f8dd388b31ac831d0497ce8595.tar.gz vyos-1x-9c8029128d2672f8dd388b31ac831d0497ce8595.zip | |
Merge pull request #5100 from sarthurdev/T8446
firewall: T8446: Prevent chain with offload rule on local zone
Diffstat (limited to 'smoketest/scripts/cli')
| -rwxr-xr-x | smoketest/scripts/cli/test_firewall.py | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/smoketest/scripts/cli/test_firewall.py b/smoketest/scripts/cli/test_firewall.py index caa36e887..224c29a5e 100755 --- a/smoketest/scripts/cli/test_firewall.py +++ b/smoketest/scripts/cli/test_firewall.py @@ -1020,6 +1020,20 @@ class TestFirewall(VyOSUnitTestSHIM.TestCase): self.cli_set(['firewall', 'global-options', 'state-policy', 'related', 'action', 'accept']) self.cli_set(['firewall', 'global-options', 'state-policy', 'invalid', 'action', 'drop']) + # Test error on offload from local zone + self.cli_set(['firewall', 'flowtable', 'smoketest', 'interface', 'eth0']) + self.cli_set(['firewall', 'flowtable', 'smoketest', 'offload', 'software']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '1', 'action', 'offload']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '1', 'offload-target', 'smoketest']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '1', 'state', 'established']) + self.cli_set(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '1', 'state', 'related']) + + with self.assertRaises(ConfigSessionError): + self.cli_commit() + + self.cli_delete(['firewall', 'flowtable', 'smoketest']) + self.cli_delete(['firewall', 'ipv4', 'name', 'smoketest', 'rule', '1']) + self.cli_commit() nftables_search = [ |