#!/bin/bash

set -e

# there is no legacy backend to test

[[ $XT_MULTI == */xtables-nft-multi ]] || { echo "skip $XT_MULTI"; exit 0; }

# arptables-restore reuses preloaded targets and matches, make sure defaults

# apply to consecutive rules using the same target/match as a previous one

DUMP='*filter

:OUTPUT ACCEPT

-A OUTPUT -j mangle --mangle-ip-s 10.0.0.1

-A OUTPUT --h-length 6 --h-type 1 -j mangle --mangle-ip-d 10.0.0.2

'

# note how mangle-ip-s is unset in second rule

EXPECT='*filter

:INPUT ACCEPT

:OUTPUT ACCEPT

-A OUTPUT --h-length 6 --h-type 1 -j mangle --mangle-ip-s 10.0.0.1

-A OUTPUT --h-length 6 --h-type 1 -j mangle --mangle-ip-d 10.0.0.2

'

$XT_MULTI arptables -F

$XT_MULTI arptables-restore <<<$DUMP

diff -u <(echo -e "$EXPECT") <($XT_MULTI arptables-save | grep -v '^#')