FWD_START_TEST([ipset duplicate entries])
AT_KEYWORDS(ipset rhbz1601610)

CHECK_IPSET

FWD_CHECK([-q --new-ipset=foobar --permanent --type=hash:net])
FWD_RELOAD

FWD_CHECK([-q --ipset=foobar --add-entry=10.1.1.0/22])
FWD_CHECK([-q --ipset=foobar --add-entry=10.1.2.0/22], 13, ignore, ignore)
FWD_CHECK([-q --ipset=foobar --add-entry=10.2.0.0/22])
FWD_CHECK([--ipset=foobar --get-entries], 0, [dnl
10.1.1.0/22
10.2.0.0/22
])
NFT_LIST_SET([foobar], 0, [dnl
table inet firewalld {
set foobar {
type ipv4_addr
flags interval
elements = { 10.1.0.0/22, 10.2.0.0/22 }
}
}
])
IPSET_LIST_SET([foobar], 0, [dnl
Name: foobar
Type: hash:net
Members:
10.1.0.0/22
10.2.0.0/22
])

FWD_CHECK([-q --ipset=foobar --remove-entry=10.1.1.0/22])
FWD_CHECK([--ipset=foobar --get-entries], 0, [dnl
10.2.0.0/22
])
NFT_LIST_SET([foobar], 0, [dnl
table inet firewalld {
set foobar {
type ipv4_addr
flags interval
elements = { 10.2.0.0/22 }
}
}
])
IPSET_LIST_SET([foobar], 0, [dnl
Name: foobar
Type: hash:net
Members:
10.2.0.0/22
])

FWD_CHECK([-q --permanent --ipset=foobar --add-entry=10.1.1.0/22])
FWD_CHECK([--permanent --ipset=foobar --get-entries], 0, [dnl
10.1.1.0/22
])
FWD_CHECK([-q --permanent --ipset=foobar --remove-entry=10.1.1.0/22])
FWD_CHECK([--permanent --ipset=foobar --get-entries], 0, [
])

dnl rhbz 1644834
FWD_CHECK([-q --ipset=foobar --add-entry=10.3.0.0/22])
FWD_CHECK([-q --runtime-to-permanent])
FWD_RELOAD
NFT_LIST_SET([foobar], 0, [dnl
table inet firewalld {
set foobar {
type ipv4_addr
flags interval
elements = { 10.2.0.0/22, 10.3.0.0/22 }
}
}
])
IPSET_LIST_SET([foobar], 0, [dnl
Name: foobar
Type: hash:net
Members:
10.2.0.0/22
10.3.0.0/22
])

dnl rhbz 1644834, again with IndividualCalls=yes
AT_CHECK([sed -i 's/^IndividualCalls.*/IndividualCalls=yes/' ./firewalld.conf])
FWD_RELOAD
NFT_LIST_SET([foobar], 0, [dnl
table inet firewalld {
set foobar {
type ipv4_addr
flags interval
elements = { 10.2.0.0/22, 10.3.0.0/22 }
}
}
])
IPSET_LIST_SET([foobar], 0, [dnl
Name: foobar
Type: hash:net
Members:
10.2.0.0/22
10.3.0.0/22
])

FWD_END_TEST([-e '/ERROR: COMMAND_FAILED:.*already added.*/d'dnl
              -e '/ERROR: COMMAND_FAILED:.*element.*exists/d'dnl
              -e '/Kernel support protocol versions/d'])