Blame tests/shell/testcases/sets/0024named_objects_0
|
Packit |
c5a612 |
#!/bin/bash
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
# This is the testscase:
|
|
Packit |
c5a612 |
# * creating valid named objects
|
|
Packit |
c5a612 |
# * referencing them from a valid rule
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
RULESET="
|
|
Packit |
c5a612 |
table inet x {
|
|
Packit |
c5a612 |
counter user123 {
|
|
Packit |
c5a612 |
packets 12 bytes 1433
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
counter user321 {
|
|
Packit |
c5a612 |
packets 12 bytes 1433
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
quota user123 {
|
|
Packit |
c5a612 |
over 2000 bytes
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
quota user124 {
|
|
Packit |
c5a612 |
over 2000 bytes
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
set y {
|
|
Packit |
c5a612 |
type ipv4_addr
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
map test {
|
|
Packit |
c5a612 |
type ipv4_addr : quota
|
|
Packit |
c5a612 |
elements = { 192.168.2.2 : "user124", 192.168.2.3 : "user124"}
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
chain y {
|
|
Packit |
c5a612 |
type filter hook input priority 0; policy accept;
|
|
Packit |
c5a612 |
counter name ip saddr map { 192.168.2.2 : "user123", 1.1.1.1 : "user123", 2.2.2.2 : "user123"}
|
|
Packit |
c5a612 |
quota name ip saddr map @test drop
|
|
Packit |
c5a612 |
}
|
|
Packit |
c5a612 |
}"
|
|
Packit |
c5a612 |
|
|
Packit |
c5a612 |
set -e
|
|
Packit |
c5a612 |
$NFT -f - <<< "$RULESET"
|
|
Packit |
c5a612 |
|
|
Packit Service |
397dcd |
EXPECTED="table inet x {
|
|
Packit Service |
397dcd |
counter user321 {
|
|
Packit Service |
397dcd |
packets 12 bytes 1433
|
|
Packit Service |
397dcd |
}
|
|
Packit Service |
397dcd |
}"
|
|
Packit Service |
397dcd |
|
|
Packit Service |
397dcd |
GET="$($NFT reset counter inet x user321)"
|
|
Packit Service |
397dcd |
if [ "$EXPECTED" != "$GET" ] ; then
|
|
Packit Service |
397dcd |
$DIFF -u <(echo "$EXPECTED") <(echo "$GET")
|
|
Packit Service |
397dcd |
exit 1
|
|
Packit Service |
397dcd |
fi
|