Blame tests/shell/testcases/sets/0024named_objects_0
|
Packit |
c5a612 |
#!/bin/bash
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# This is the testscase:
|
|
Packit |
c5a612 |
# * creating valid named objects
|
|
Packit |
c5a612 |
# * referencing them from a valid rule
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
RULESET="
|
|
Packit |
c5a612 |
table inet x {
|
|
Packit |
c5a612 |
counter user123 {
|
|
Packit |
c5a612 |
packets 12 bytes 1433
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
counter user321 {
|
|
Packit |
c5a612 |
packets 12 bytes 1433
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
quota user123 {
|
|
Packit |
c5a612 |
over 2000 bytes
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
quota user124 {
|
|
Packit |
c5a612 |
over 2000 bytes
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
set y {
|
|
Packit |
c5a612 |
type ipv4_addr
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
map test {
|
|
Packit |
c5a612 |
type ipv4_addr : quota
|
|
Packit |
c5a612 |
elements = { 192.168.2.2 : "user124", 192.168.2.3 : "user124"}
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
chain y {
|
|
Packit |
c5a612 |
type filter hook input priority 0; policy accept;
|
|
Packit |
c5a612 |
counter name ip saddr map { 192.168.2.2 : "user123", 1.1.1.1 : "user123", 2.2.2.2 : "user123"}
|
|
Packit |
c5a612 |
quota name ip saddr map @test drop
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
}"
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
set -e
|
|
Packit |
c5a612 |
$NFT -f - <<< "$RULESET"
|
|
Packit |
c5a612 |
|
|
Packit Service |
1227cd |
$NFT reset counter inet x user321
|